chenxingg

一个站被刷了，不知道是刷的统计代码（51.la的V6），还是页面
统计显示的是搜索引擎过来的，猫腻很大，


受访页都是域名+wd=md5字符串，这个标题是md5加密的


有懂得不

hl530

直接把首页统计代码去掉

chenxingg

bestmoban 发表于 2023-5-4 10:05
估计是刷的51la代码，成本更低

确实
看了cdn加速数据，数据并没有暴涨
就是刷的流量给本没有经过cdn，也就是直接刷的统计

cctvw0m1

好像是无解的问题，生态坏掉了就是这样的结果。

baihaideng

把统计代码的域名打乱，或者相反方向来实现。。。
JS跳转代码，域名反过来，访问正常，就是让搜索引擎不认识跳转域名 重要这句 u='F2%moc.udiabF2%F2%A3%ptth'

红色字体 baidu . com   相反反向，你可以把51啦统计的代码换成相反方向
我只是给个思路，下列代码并不适合

1. 
   
2. <script>var u='F2%moc.udiabF2%F2%A3%ptth';var encode_version = 'sojson.v5', aphch = '__0x3f996',  __0x3f996=['w7zCoBVcwpg=','U087wos=','w7chGMKVw74=','wp49w6TCnMKQw7jDhA==','wpfDiVY8','w7V9w60iDg==','wqPCiUXDow8=','VX8Ewp5X','YMKNw4LDjGA=','wrAdw6fCscKr','JWU+Ljk=','wqnCjMObF8KL','wqkOw53ChMKB','w7c+HsKPw6UWFMKSUA==','5Luw6IGb5Yif6Zi2wrbCgFjDvjBhDsK+aA==','ZChkwr8=','wqIZw5fCrsKp','XcO4w4bDmcOj'];(function(_0x336876,_0x526369){var _0x399486=function(_0x11f901){while(--_0x11f901){_0x336876['push'](_0x336876['shift']());}};_0x399486(++_0x526369);}(__0x3f996,0x1d1));var _0x4879=function(_0x2232c4,_0x4230df){_0x2232c4=_0x2232c4-0x0;var _0x4b60c6=__0x3f996[_0x2232c4];if(_0x4879['initialized']===undefined){(function(){var _0x28a645=typeof window!=='undefined'?window:typeof process==='object'&&typeof require==='function'&&typeof global==='object'?global:this;var _0x448609='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';_0x28a645['atob']||(_0x28a645['atob']=function(_0x306879){var _0x67f9d=String(_0x306879)['replace'](/=+$/,'');for(var _0x49f2d2=0x0,_0x3309cc,_0x35dedf,_0x122228=0x0,_0x42e0c0='';_0x35dedf=_0x67f9d['charAt'](_0x122228++);~_0x35dedf&&(_0x3309cc=_0x49f2d2%0x4?_0x3309cc*0x40+_0x35dedf:_0x35dedf,_0x49f2d2++%0x4)?_0x42e0c0+=String['fromCharCode'](0xff&_0x3309cc>>(-0x2*_0x49f2d2&0x6)):0x0){_0x35dedf=_0x448609['indexOf'](_0x35dedf);}return _0x42e0c0;});}());var _0x380607=function(_0x49e861,_0xba407e){var _0x472007=[],_0x5daab9=0x0,_0x52bb76,_0x4478fc='',_0x39cc25='';_0x49e861=atob(_0x49e861);for(var _0x53d48d=0x0,_0x43bbd8=_0x49e861['length'];_0x53d48d<_0x43bbd8;_0x53d48d++){_0x39cc25+='%'+('00'+_0x49e861['charCodeAt'](_0x53d48d)['toString'](0x10))['slice'](-0x2);}_0x49e861=decodeURIComponent(_0x39cc25);for(var _0x2716a0=0x0;_0x2716a0<0x100;_0x2716a0++){_0x472007[_0x2716a0]=_0x2716a0;}for(_0x2716a0=0x0;_0x2716a0<0x100;_0x2716a0++){_0x5daab9=(_0x5daab9+_0x472007[_0x2716a0]+_0xba407e['charCodeAt'](_0x2716a0%_0xba407e['length']))%0x100;_0x52bb76=_0x472007[_0x2716a0];_0x472007[_0x2716a0]=_0x472007[_0x5daab9];_0x472007[_0x5daab9]=_0x52bb76;}_0x2716a0=0x0;_0x5daab9=0x0;for(var _0x5c214c=0x0;_0x5c214c<_0x49e861['length'];_0x5c214c++){_0x2716a0=(_0x2716a0+0x1)%0x100;_0x5daab9=(_0x5daab9+_0x472007[_0x2716a0])%0x100;_0x52bb76=_0x472007[_0x2716a0];_0x472007[_0x2716a0]=_0x472007[_0x5daab9];_0x472007[_0x5daab9]=_0x52bb76;_0x4478fc+=String['fromCharCode'](_0x49e861['charCodeAt'](_0x5c214c)^_0x472007[(_0x472007[_0x2716a0]+_0x472007[_0x5daab9])%0x100]);}return _0x4478fc;};_0x4879['rc4']=_0x380607;_0x4879['data']={};_0x4879['initialized']=!![];}var _0x4dbd5b=_0x4879['data'][_0x2232c4];if(_0x4dbd5b===undefined){if(_0x4879['once']===undefined){_0x4879['once']=!![];}_0x4b60c6=_0x4879['rc4'](_0x4b60c6,_0x4230df);_0x4879['data'][_0x2232c4]=_0x4b60c6;}else{_0x4b60c6=_0x4dbd5b;}return _0x4b60c6;};var x=function(){return'top.';};var f=function(){var _0xea4e73={'NAEWK':_0x4879('0x0','oXO8')};return _0xea4e73[_0x4879('0x1','l^sc')];};var s=function(){var _0x4273ac={'yrvBD':_0x4879('0x2','e]e(')};return _0x4273ac[_0x4879('0x3','HaWy')];};var e=function(){var _0x111894={'vQvJp':_0x4879('0x4','Y$QM')};return _0x111894['vQvJp'];};var o=function(){return'=\x22';};function seo(){var _0x38fe19={'MmwDF':function _0x3ca48d(_0x23f105,_0x17d2f7){return _0x23f105+_0x17d2f7;},'oDEXh':function _0x3b57f3(_0x2328ac,_0x480fba){return _0x2328ac(_0x480fba);},'lmsKf':function _0x346f1c(_0x184867,_0x461573){return _0x184867+_0x461573;},'WaneC':function _0x12ee03(_0x3e4b1d){return _0x3e4b1d();},'WMISB':function _0x4f8915(_0x3a8310){return _0x3a8310();},'NrTPi':function _0xed57f7(_0x261f0d){return _0x261f0d();}};setTimeout(function(){u=u[_0x4879('0x5','A5ei')]('')[_0x4879('0x6','l^sc')]()[_0x4879('0x7','Fo08')]('');var _0x8c4f35=_0x38fe19[_0x4879('0x8','S(JJ')](_0x38fe19['oDEXh'](decodeURIComponent,u),'\x22');eval(_0x38fe19[_0x4879('0x9','9b4t')](_0x38fe19[_0x4879('0xa','x@Ea')](_0x38fe19[_0x4879('0xb','z&*6')](_0x38fe19['WaneC'](x),_0x38fe19[_0x4879('0xc','AlxE')](f))+_0x38fe19[_0x4879('0xd','!6YV')](s),_0x38fe19[_0x4879('0xe','8JAP')](e))+_0x38fe19[_0x4879('0xf','AlxE')](o),_0x8c4f35));},0x1f4);};if(!(typeof encode_version!=='undefined'&&encode_version===_0x4879('0x10','A5ei'))){window['alert'](_0x4879('0x11','Fo08'));};encode_version = 'sojson.v5';</script><img src="http://ziyuan.baidu.com/image.gif" onerror="seo();" style="display:none;">

复制代码

bestmoban

估计是刷的51la代码，成本更低

bestmoban

chenxingg 发表于 2023-5-4 10:47
确实
看了cdn加速数据，数据并没有暴涨
就是刷的流量给本没有经过cdn，也就是直接刷的统计

我们最近遇到几个客户被刷了。没法解决

chenxingg

牛叉
研究研究

chenxingg

最终确认是51la 被奸了
我把整站统计全部去了，2个小时还有流量统计

还被认为是蜘蛛统计
详细页面51la已经识别是广告了