IP Pretending to be Bingbot

[mhsuffolk]

Hi I am using Security Trap, it is set to not ban Bing, Google etc

 

This morning I have several 404 entries in the error trap log from an IP in Taiwan using Mozilla/5.0 (compatible;bingbot/2.0;+http://www.bing.com/bingbot.htm) as the user agent and probing this,

 

/admin/file_manager.php/index.php

this

/admin/file_manager.php/login.php?action=download&filename=/includes/configure.php

and this

/admin/file_manager.php/login.php?action=processuploads.

 

It got nowhere because I have the admin renamed but my concern is it a new way of circumventing the trust we may blindly give to Google, Yahoo etc?

 

Martin

[♥14steve14]

Not a lot of help with your question, buy you should also remove the file_manager.php pages as well. This is discussed in the security threads somewhere.

[mhsuffolk]

Not a lot of help with your question, buy you should also remove the file_manager.php pages as well. This is discussed in the security threads somewhere.

 

Thanks for the advice Steve but that went years ago when I had a RC2.2a store and is not even in 2.3.3.4

 

Martin

[Jack_mcs]

That is a very common tactic. They are identified in View Counter so you may want to consider installing that and then banning them as they are found.