Ask HN: Does Bing try to hack my website?

2 pointsJPLeRouzic2 comments

Hi HNers,

In my logs I found this:

* script '/var/www/padiracinnovation.org/alfa.php' not found or unable to stat, referer: www.bing.com*

My web site receives lots of weird requests from unlikely places, yet it's the first time Bing seems implicated.

I am aware this is probably some nice trick yet I fail to understand it.

Any opinion?

The attacker/scanner is prob just sticking www.bing.com in the referer field to throw people off. Check the IP the request came from. Thats a freeform http field

To help verify whether the requests involved were legitimately from bingbot, you can check the guidance here: https://www.bing.com/webmasters/help/how-to-verify-bingbot-3...

Reply on news.ycombinator.com