阿里云
发表主题 回复主题
  • 891阅读
  • 3回复

[求助]把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。

级别: 小白
发帖
27
云币
31
己写了一个简易的http协议升级wesocket协议,绑定到8080端口,又不是标准的http协议80端口,为何阿里要用http协议来扫描8080端口。下面是记录的日志(只开了10分钟): rX>y>{w~  
2bn@:71`  
k@";i4}A  
17:01:39 MSG:ucid 1 TCP connected from IP:120.132.3.151! 0i Z9a/v  
ks#Z~6+3  
C8W`Oly:]  
17:01:39 MSG:ucid 2 TCP connected from IP:120.132.3.151! QH' [ (  
`)C`_g3Ew  
4bFVyv  
17:01:39 MSG:ucid 3 TCP connected from IP:120.132.3.151! J_[[BJ&}x  
3 cW"VrFy9  
Nb!6YY=Ez-  
17:01:39 MSG:ucid 3:GET http://www.qq.com/404/search_children.js HTTP/1.1 vBYT)S  
FeeWZe0i  
.SV3<)  
17:01:39 MSG:ucid 3 disconnected! pOI`,i}.  
7(g&z%  
rWfurB5f  
17:01:44 MSG:ucid 1 disconnected! Q%VR@[`\  
+ZA\ M:^b  
AW&s-b%P  
17:01:44 MSG:ucid 2 disconnected! -%V-'X5  
i[\u-TF  
o4 g  
17:08:08 MSG:ucid 4 TCP connected from IP:140.205.225.193! `L*;58MA  
iN4'jD^oP  
P5xmLefng  
17:08:08 MSG:ucid 4:GET / HTTP/1.1 %PdYv _5  
s1\BjSzk  
34^Cfh  
17:08:08 MSG:ucid 4 disconnected! JR<-'  
RrpF i'R  
j"sO<Q{6%  
17:08:14 MSG:ucid 5 TCP connected from IP:140.205.225.193! 5YH mp7c-z  
BI^]juH-c  
qq_,"~  
17:08:14 MSG:ucid 5:GET / HTTP/1.1 EEZ2Gu6c  
b-zX3R;  
<m:wuNEM  
17:08:14 MSG:ucid 5 disconnected! [_hhC  
2\tjeg  
6:tr8 X_  
17:08:34 MSG:ucid 6 TCP connected from IP:140.205.225.193! rPpAg  
vGHYB1=~  
Tn-]0hWkP  
17:08:34 MSG:ucid 6:GET / HTTP/1.1 U*:'/.  
5g>kr< K  
*+Q*&-$  
17:08:34 MSG:ucid 6 disconnected! V(uRKu x  
$[CA#AXE  
YY~=h5$  
17:08:38 MSG:ucid 7 TCP connected from IP:140.205.225.193! }V;]c~Q/H  
j$oZIV7  
2I 7`  
17:08:38 MSG:ucid 7:GET /clusters.jsf HTTP/1.1 -%) !XB  
bu&y w~  
)_K@?rWS  
17:08:38 MSG:ucid 7 disconnected! FN EmGz/4  
1W<_5 j_  
|bnjC$b*  
17:09:16 MSG:ucid 8 TCP connected from IP:140.205.225.193! t+J6P)=  
*v/*_6f*  
RcP5].^T  
17:09:16 MSG:ucid 8:GET / HTTP/1.1 qJt gnk|  
S]=Vr%irX  
T=dvc}  
17:09:16 MSG:ucid 8 disconnected! ScoHtX3  
zRFM/IYC  
V <pjR@  
17:09:17 MSG:ucid 9 TCP connected from IP:140.205.225.193! 53 05N!  
hO@3-SRa,k  
Pv.@Y 30  
17:09:17 MSG:ucid 9:GET /jenkins/ HTTP/1.1 jloyJ@ck  
Mu%,@?zM^/  
Y g?{x@  
17:09:17 MSG:ucid 9 disconnected! rapca'&#  
oF xVK  
$7d"9s\$"  
17:09:18 MSG:ucid 10 TCP connected from IP:140.205.225.193! ]t;5kj/  
:%MWbnVSC,  
 |?A-?-  
17:09:18 MSG:ucid 10:GET /zabbix/ HTTP/1.1 ?='9YM  
IyP].g1"U  
'v  X"l  
17:09:18 MSG:ucid 10 disconnected! 1_lL?S3,a@  
P$I\)Q H  
;D:T ^4  
17:09:18 MSG:ucid 11 TCP connected from IP:140.205.225.193! qr6jn14.c  
HXI}f\6x  
e,8-P-h~T  
17:09:18 MSG:ucid 11:GET / HTTP/1.1 idy:Jei}  
X2v'9 x  
h[T3WE  
17:09:19 MSG:ucid 11 disconnected! 9MxGyGz$  
vNGvEJ`qn  
7ow1=%Q  
17:09:20 MSG:ucid 12 TCP connected from IP:140.205.225.193! ez{&Y>n  
M.xEiHz  
BL67sva;  
17:09:20 MSG:ucid 12:GET / HTTP/1.1 x{$NstGB  
rej[G!  
Bx F  
17:09:20 MSG:ucid 12 disconnected! ?*,q#ZkA9W  
"Q1hP9xV  
mLE`IKgd]  
17:09:20 MSG:ucid 13 TCP connected from IP:140.205.225.193! > R=YF*t  
{y'k wU  
d@hJ=-4  
17:09:20 MSG:ucid 13:GET /solr/ HTTP/1.1 qM+T Wp  
V 6F,X`7  
$`%.Y&A  
17:09:20 MSG:ucid 13 disconnected! K#jm6Xh?E  
dkjL;1  
1a<~Rmcil  
17:09:50 MSG:ucid 14 TCP connected from IP:140.205.225.193! N5^:2ag  
?W()Do1tR  
?=/l@d  
17:09:50 MSG:ucid 14:GET /j_acegi_security_check HTTP/1.1 O);V{1P  
;XT$rtuX  
aC*J=_9o #  
17:09:50 MSG:ucid 14 disconnected! 4y 'REC  
dSbV{*B;>  
8Xr"4;}f+  
17:09:50 MSG:ucid 15 TCP connected from IP:140.205.225.193! ]P.S5s'  
^IpS 3y  
W8)GT`\  
17:09:50 MSG:ucid 15:POST /j_acegi_security_check HTTP/1.1 rAWBuEU;!  
-Db(  
]l`DR4 =  
17:09:50 MSG:ucid 15 disconnected! XZhhr1-<a  
(U)=t$=o  
J#\/znT  
17:09:51 MSG:ucid 16 TCP connected from IP:140.205.225.193! piU4%EO  
ZP1EO Z  
pxgv(:Tw  
17:09:51 MSG:ucid 16:POST /j_acegi_security_check HTTP/1.1 <iMLM<J<w  
~34$D],D  
^-DK<jZ^  
17:09:51 MSG:ucid 16 disconnected! b+kb7  
uaiG (O   
dpy,;nqzeN  
17:09:51 MSG:ucid 17 TCP connected from IP:140.205.225.193! Ab2VF;z :  
%BL+'&q  
l! GPOmf9`  
17:09:51 MSG:ucid 17:POST /j_acegi_security_check HTTP/1.1 Mf?4 `LM  
M:ttzsd  
K~uoZ~_gA  
17:09:51 MSG:ucid 17 disconnected! #VLTx!5o  
$lvpBs  
9vXrC_W9  
17:09:52 MSG:ucid 18 TCP connected from IP:140.205.225.193! >d =k-d  
.69{GM?  
"F=O   
17:09:52 MSG:ucid 18:POST /j_acegi_security_check HTTP/1.1 L;Nm"[ `  
tYnNOK*|  
STO6cNi  
17:09:52 MSG:ucid 18 disconnected! AtSEKpKc  
.2`S07Z  
K1Uur>Pk%  
17:09:52 MSG:ucid 19 TCP connected from IP:140.205.225.193! LcQ\d*  
\MnlRBUM,  
Kpg]b"9.R  
17:09:52 MSG:ucid 19:POST /j_acegi_security_check HTTP/1.1 ,2"-G";!f\  
&P rx=L`  
5@?P 8  
17:09:52 MSG:ucid 19 disconnected! E#J+.&2  
XJ.vj+XXb  
-FwOX~s/'  
17:09:53 MSG:ucid 20 TCP connected from IP:140.205.225.193!  a(F%M  
$P>ci4]t  
4~D?F'o  
17:09:53 MSG:ucid 20:POST /j_acegi_security_check HTTP/1.1 EiSS_Lc  
"Q ^Ck7  
l9\ *G;  
17:09:53 MSG:ucid 20 disconnected! WJ8i,7  
YeT[KjX  
+Ibcc8Qud  
17:09:53 MSG:ucid 21 TCP connected from IP:140.205.225.193! [*@"[u   
@jX[Ho0W'  
c5pF?kFaD  
17:09:53 MSG:ucid 21:POST /j_acegi_security_check HTTP/1.1 525W; mu{  
+ Uq$'2CT  
z.--"cF  
17:09:53 MSG:ucid 21 disconnected! kU0e;r1N  
(i1 ]+.  
J;HkR9<C  
17:09:54 MSG:ucid 22 TCP connected from IP:140.205.225.193! ;mu^WIj  
rUR{MF&]D  
pri=;I(2A  
17:09:54 MSG:ucid 22:POST /j_acegi_security_check HTTP/1.1 @h$cHZ  
Z+x,Awq  
1ve %xF  
17:09:54 MSG:ucid 22 disconnected! q{ i9VJ]  
/^SIJS@^`>  
nDhr;/"i  
17:09:54 MSG:ucid 23 TCP connected from IP:140.205.225.193! ( $A0b  
A}W) La\  
q#$Al  
17:09:54 MSG:ucid 23:POST /j_acegi_security_check HTTP/1.1 %We~k'2f  
$hXhq*5|c  
iv*`.9TK-  
17:09:54 MSG:ucid 23 disconnected! E<y0;l?H<  
Js.2R$o =*  
F jsnFX;  
17:09:55 MSG:ucid 24 TCP connected from IP:140.205.225.193! |uf{:U)  
',$Uw|N  
p~Di\AQ/  
17:09:55 MSG:ucid 24:POST /j_acegi_security_check HTTP/1.1 2iO AUo+  
ji9 (!G  
;6P #V`u  
17:09:55 MSG:ucid 24 disconnected! :sDE 'o  
[$:M/5y9  
'RZ=A+%X  
17:09:55 MSG:ucid 25 TCP connected from IP:140.205.225.193! o}O"  
mCah{~  
)lh48Ag0t;  
17:09:55 MSG:ucid 25:POST /j_acegi_security_check HTTP/1.1 ;r'y/ Y'?  
4IfOvAN%  
PxE0b0eo  
17:09:55 MSG:ucid 25 disconnected! =A[:]),v  
OI/m_xx@j  
PW7{,1te,  
17:09:56 MSG:ucid 26 TCP connected from IP:140.205.225.193! [Ume^  
(OS -v~{r@  
gJ;jh7e@  
17:09:56 MSG:ucid 26:POST /j_acegi_security_check HTTP/1.1 {P/ sxh:e  
RgTm^?Ex  
ye?4^@u u  
17:09:56 MSG:ucid 26 disconnected! &ed&2t`Y  
;6+e!h'1  
wwmHr!b:6  
17:09:56 MSG:ucid 27 TCP connected from IP:140.205.225.193! o9GtS$ O\  
,yPs4',d  
4sJM!9eb[  
17:09:56 MSG:ucid 27:POST /j_acegi_security_check HTTP/1.1 d}B_ wz'  
`eZ +Pf".  
$+'bRUo  
17:09:56 MSG:ucid 27 disconnected! n{Ce%gy  
(_2Iu%F  
<d*;d3gm  
17:09:57 MSG:ucid 28 TCP connected from IP:140.205.225.193! 7c.96FA  
Dqxtc|vo  
}253Q!f  
17:09:57 MSG:ucid 28:POST /j_acegi_security_check HTTP/1.1 1VXyn\  
ko7*9`  
+F>9hA  
17:09:57 MSG:ucid 28 disconnected! 3$ 'eDa[  
+O]jklS4H  
A5WchS'  
17:09:57 MSG:ucid 29 TCP connected from IP:140.205.225.193! 4k7 LM]  
&PE/\_xD_  
}^b7x;O|  
17:09:57 MSG:ucid 29:GET /phpmyadmin/index.php HTTP/1.1 LA +BH_t&  
>0XB7sC  
s8O.yL  
17:09:57 MSG:ucid 30 TCP connected from IP:140.205.225.193! EdH;P \c  
"J.7@\^ h/  
}Cs. Hm0P  
17:09:57 MSG:ucid 30:POST /j_acegi_security_check HTTP/1.1 = n>aJ(=Pd  
jWUpzf)q=T  
I38j[Xk  
17:09:57 MSG:ucid 30 disconnected! o)B`K."  
J 7/)XS  
HNMVs]/e  
17:09:58 MSG:ucid 31 TCP connected from IP:140.205.225.193! 5YG %\  
L/+KY_b:*  
bP+b~!3  
17:09:58 MSG:ucid 31:POST /j_acegi_security_check HTTP/1.1 1woBw>g  
[V2`t'  
@lO(QpdG  
17:09:58 MSG:ucid 31 disconnected! $D%[}[2  
fGf C[DuY  
MJ% gF=$X  
17:09:58 MSG:ucid 32 TCP connected from IP:140.205.225.193! h%=>iQ%enc  
w(6(Fze  
<\6<-x(H5  
17:09:58 MSG:ucid 32:POST /j_acegi_security_check HTTP/1.1 #q-7#pp  
T+knd'2V6  
i0jR~vF {B  
17:09:58 MSG:ucid 32 disconnected! ? CabVj-r  
jb'A Os  
dH[TnqJn  
17:09:59 MSG:ucid 33 TCP connected from IP:140.205.225.193! YT@D*\  
qiyX{J7Z  
wMx# dP4W8  
17:09:59 MSG:ucid 33:POST /j_acegi_security_check HTTP/1.1 3B^`xnV  
\~4IOu  
EWZ?q$  
17:09:59 MSG:ucid 33 disconnected! MmL)CT  
c&]nAn(  
E4;@P']`  
17:09:59 MSG:ucid 34 TCP connected from IP:140.205.225.193! $ KAOJc4<  
R>CIEL  
c:OFBVZ   
17:09:59 MSG:ucid 34:POST /j_acegi_security_check HTTP/1.1 AzlZe\V?)~  
 ]$=\zL  
yr"BeTrS.  
17:09:59 MSG:ucid 34 disconnected! D>>?8a  
(7k}ysc  
K4`)srd  
17:10:00 MSG:ucid 35 TCP connected from IP:140.205.225.193! NW AT"  
kbcqUE  
DX\|*:,  
17:10:00 MSG:ucid 35:POST /j_acegi_security_check HTTP/1.1 hALg5.E{T  
or)v:4PXW  
'ai3f  
17:10:00 MSG:ucid 35 disconnected! w15Qqh lK  
:IB@@5r1  
O3];1ud  
17:10:00 MSG:ucid 36 TCP connected from IP:140.205.225.193! %k8 H'w\  
7{fOo%(7  
*F)+- BB  
17:10:00 MSG:ucid 36:POST /j_acegi_security_check HTTP/1.1 552U~t  
`rQDX<?  
8+=-!": ]  
17:10:00 MSG:ucid 36 disconnected! C A 8N  
4n 9c  
3~5 %6`  
17:10:01 MSG:ucid 37 TCP connected from IP:140.205.225.193! E|`JmfLQu  
3Y6W)$ Q  
"gQA|NHwV  
17:10:01 MSG:ucid 37:POST /j_acegi_security_check HTTP/1.1 ;"T,3JQPn6  
DM[gjfMXu  
%'vLkjI.  
17:10:01 MSG:ucid 37 disconnected! 0[QVU,]<  
&E+2  
bayDdR4T  
17:10:01 MSG:ucid 38 TCP connected from IP:140.205.225.193! J~=tR1 k  
RX6s[uQ  
WPXLN'w+  
17:10:01 MSG:ucid 38:POST /j_acegi_security_check HTTP/1.1 q?TI(J+/  
Sb,lY<=  
_4lhwKYU  
17:10:01 MSG:ucid 38 disconnected! "H"4]m1Wc  
UX!)\5-  
Pko2fJt1  
17:10:02 MSG:ucid 39 TCP connected from IP:140.205.225.193! SGK=WLGM8  
gT8%?U:  
j 5{ "j  
17:10:02 MSG:ucid 39:POST /j_acegi_security_check HTTP/1.1 $Il:Yw_  
ZlEH3-Zv  
,'>,N/JA  
17:10:02 MSG:ucid 39 disconnected! [L4s.l_#  
|',$5!:0O  
L kA_M'G  
17:10:02 MSG:ucid 40 TCP connected from IP:140.205.225.193! o n+:{ad  
2C@s-`b   
=U)e_q  
17:10:02 MSG:ucid 40:POST /j_acegi_security_check HTTP/1.1 $u-yw1FT  
WK)2/$7@  
W:V:Ej7 h  
17:10:02 MSG:ucid 40 disconnected! hErO.ad1o  
a3?D@@Qnw  
ER4j=O#  
17:10:03 MSG:ucid 41 TCP connected from IP:140.205.225.193! s+RSAyU  
}_ [Bp  
0'Y'K6hG`  
17:10:03 MSG:ucid 41:POST /j_acegi_security_check HTTP/1.1 LRa^x44  
O>)Fl42IeD  
?r"QJa>  
17:10:03 MSG:ucid 41 disconnected! }_vUsjK  
,Q>Rt V  
QW[ gDc  
17:10:03 MSG:ucid 42 TCP connected from IP:140.205.225.193! *W&}}iL  
l*(Ml= O{  
b?Zt3#  
17:10:03 MSG:ucid 42:POST /j_acegi_security_check HTTP/1.1 $-Wn|w+h<a  
)CAEqP  
d=~-8]%\  
17:10:03 MSG:ucid 42 disconnected! 'Bc{N^  
:l/?cV;  
$MPh\T  
17:10:04 MSG:ucid 43 TCP connected from IP:140.205.225.193! 5:r*em  
0!6n  
X4z6#S58  
17:10:04 MSG:ucid 43:POST /j_acegi_security_check HTTP/1.1 \4qw LM?E^  
n9p_D  
Nu]& ?  
17:10:04 MSG:ucid 43 disconnected! _/(7:  
pA|Z%aL  
AXmW7/Sj"  
17:10:04 MSG:ucid 44 TCP connected from IP:140.205.225.193! 6~#$bp^-  
S, g/2k*  
Za4X ;  
17:10:04 MSG:ucid 44:POST /j_acegi_security_check HTTP/1.1 KOqp@K$  
uOU?-WtPz  
93+p~?  
17:10:04 MSG:ucid 44 disconnected! =:~%$5[[  
ZBX,4kxK7  
h0v4!`PQ-  
17:10:05 MSG:ucid 45 TCP connected from IP:140.205.225.193! &y~EEh|  
0w24lVR.  
H/Wo~$  
17:10:05 MSG:ucid 45:POST /j_acegi_security_check HTTP/1.1 Ny oRp  
|}YeQl  
^.]]0Rp&  
17:10:05 MSG:ucid 45 disconnected! &N^^[ uG  
@j vF[wi;  
K@DK4{  
17:10:05 MSG:ucid 46 TCP connected from IP:140.205.225.193! vi :IO  
ag~4m5n*~  
`fA|])3T  
17:10:05 MSG:ucid 46:POST /j_acegi_security_check HTTP/1.1 WOgPhJ  
NDt +m  
>^!qx b-  
17:10:05 MSG:ucid 46 disconnected! '=^$ ;3Z  
y66V&#`,e0  
+d=cI  
17:10:06 MSG:ucid 47 TCP connected from IP:140.205.225.193! >gqd y*Bg  
G"~%[k  
uBPxMwohR  
17:10:06 MSG:ucid 47:POST /j_acegi_security_check HTTP/1.1 @aX$}  
zURob MpE#  
j![;;  
17:10:06 MSG:ucid 47 disconnected! p` '8M  
"AAzBWd/  
/<\B8^yQ  
17:10:06 MSG:ucid 48 TCP connected from IP:140.205.225.193! g'F{;Ur  
c,\!<4  
@H?_x/qBT  
17:10:06 MSG:ucid 48:POST /j_acegi_security_check HTTP/1.1 :())%Xu3  
j |N8"8"  
H /kSFf{  
17:10:06 MSG:ucid 48 disconnected! R p!R&U/  
h.`U)6*?&N  
~BSE8M+r  
17:10:07 MSG:ucid 49 TCP connected from IP:140.205.225.193! n<. T6  
]B;\?Tim  
) ag8]   
17:10:07 MSG:ucid 49:POST /j_acegi_security_check HTTP/1.1 %dyEF8)  
&?-LL{W{  
\U1fUrw$*  
17:10:07 MSG:ucid 49 disconnected! j\ dY  
L;n2,b  
D9#?l <D  
17:10:07 MSG:ucid 29 disconnected! Zv`j+b  
-\.'WZo`  
N<xf=a+j  
17:10:07 MSG:ucid 50 TCP connected from IP:140.205.225.193! ;U +;NsCH  
:[#~,TW  
qrFC4\q}  
17:10:07 MSG:ucid 50:POST /j_acegi_security_check HTTP/1.1 (Oc[j{6q  
Q}?yj,D D  
XYKWOrkQqa  
17:10:07 MSG:ucid 50 disconnected! j:yQP# U  
T@n-^B!Xq  
J| orvnkK  
17:10:08 MSG:ucid 51 TCP connected from IP:140.205.225.193! ?D].Za^km  
Bh9O<|E  
sGf\!w  
17:10:08 MSG:ucid 51:GET /j_acegi_security_check HTTP/1.1 iXN7+QO)  
VtR?/+8X  
blwdcdh  
17:10:08 MSG:ucid 51 disconnected! 5$r`e+Nf'  
Q]';1#J\  
o@?3i+%}8  
17:10:09 MSG:ucid 52 TCP connected from IP:140.205.225.193! ^lqcF.  
<&7KcvBn"4  
%SRUHx[D  
17:10:09 MSG:ucid 52:POST /j_acegi_security_check HTTP/1.1 -%&_LE9ZtS  
(c /H$'  
U&fOsx?"  
17:10:09 MSG:ucid 52 disconnected! cxTP4\T\E  
;79X# hI  
y.AF90Q>)  
17:10:09 MSG:ucid 53 TCP connected from IP:140.205.225.193! zN(fZT}K5  
w_po5[]R  
+Y!9)~f}7X  
17:10:09 MSG:ucid 53:POST /j_acegi_security_check HTTP/1.1 Hno:"k?  
G<kslTPyq  
]Dm'J%P0}  
17:10:09 MSG:ucid 53 disconnected! h1.]Nl C  
:t\pi. uWt  
5oQy $Y  
17:10:10 MSG:ucid 54 TCP connected from IP:140.205.225.193! 6i/x"vl>  
kji*7a?y  
.*u, !1u  
17:10:10 MSG:ucid 54:POST /j_acegi_security_check HTTP/1.1 ] X,C9  
4@PH5z  
Egv (n@1  
17:10:10 MSG:ucid 54 disconnected! LL5n{#)N  
X>w(^L*>  
G#ov2  
17:10:10 MSG:ucid 55 TCP connected from IP:140.205.225.193! zbdmz  
eK\1cs  
$m`?x5rL8  
17:10:10 MSG:ucid 55:POST /j_acegi_security_check HTTP/1.1 Z~^)B8  
=[!&&,c=  
WjxO M\?#  
17:10:10 MSG:ucid 55 disconnected! SwV{t}I  
~6`HJ  
w-?_U7'  
17:10:11 MSG:ucid 56 TCP connected from IP:140.205.225.193! $:V'+s4o  
M]YK]VyG  
!(PAUW S@  
17:10:11 MSG:ucid 56:POST /j_acegi_security_check HTTP/1.1 C-/<5D j  
WpE\N0Yg  
^>02,X mk  
17:10:11 MSG:ucid 56 disconnected! ~"89NVk"  
@K; 4'b~  
m @) ~.E  
17:10:11 MSG:ucid 57 TCP connected from IP:140.205.225.193! t W ;1  
_,:gSDW|  
FU9q|!2Y  
17:10:11 MSG:ucid 57:POST /j_acegi_security_check HTTP/1.1 >%k:+ +b{  
5y;texsj[  
_NQMi4 V(  
17:10:11 MSG:ucid 57 disconnected! s86Ij>VLf  
+CL`]'~;E-  
coq7La[  
17:10:12 MSG:ucid 58 TCP connected from IP:140.205.225.193! ]ovP^]]V  
Zq7Y('=`t@  
zKB$n.H  
17:10:12 MSG:ucid 58:POST /j_acegi_security_check HTTP/1.1 "w.gP8`  
5[3vu p?  
aI]EwVz-q  
17:10:12 MSG:ucid 58 disconnected! v7x %V%K  
?-w<H!Y7  
&5:83#*Oj  
17:10:12 MSG:ucid 59 TCP connected from IP:140.205.225.193! t]LOBy-Kv  
X6I"&yct  
EaaLN<i@0  
17:10:12 MSG:ucid 59:GET /phpMyAdmin/index.php HTTP/1.1 34S0W]V  
)Y.H*ca  
SPfz/ q{  
17:10:12 MSG:ucid 60 TCP connected from IP:140.205.225.193! hKo& ZWPq  
[?z`XY_-  
s`Z | A  
17:10:12 MSG:ucid 60:POST /j_acegi_security_check HTTP/1.1 ?:DeOBAb  
SVKjhZK  
4e OS+&  
17:10:12 MSG:ucid 60 disconnected! Zi'}qs$v  
]\DZW4?'  
>@?!-Fy5  
17:10:13 MSG:ucid 61 TCP connected from IP:140.205.225.193! g i>`  
(R^X3  
(lPiv+'n  
17:10:13 MSG:ucid 61:POST /j_acegi_security_check HTTP/1.1 .d mUh-  
t!^ j0q  
Lg6;FbY?  
17:10:13 MSG:ucid 61 disconnected! .8[*`%K>  
%DOV)Qc2  
;W"=s79  
17:10:13 MSG:ucid 62 TCP connected from IP:140.205.225.193! >~_oSC)E  
JTg:3<L  
E}-Y!,v^  
17:10:13 MSG:ucid 62:POST /j_acegi_security_check HTTP/1.1 !q]@/<=  
mf4C68DI@u  
?rauhTVnJ  
17:10:13 MSG:ucid 62 disconnected! y}aKL(AaU  
*z?Vy<u G  
Tj(DdR#w  
17:10:14 MSG:ucid 63 TCP connected from IP:140.205.225.193! 2g0_[$[m  
8&q[jxI@8  
<rQ+ErDA  
17:10:14 MSG:ucid 63:POST /j_acegi_security_check HTTP/1.1 PvHX#wJ  
$0[t<4K`yn  
 =&8Cg  
17:10:14 MSG:ucid 63 disconnected! n,Gvgf  
G!<-9HA5  
Xzn}gH]  
17:10:14 MSG:ucid 64 TCP connected from IP:140.205.225.193! TmEJ!)*  
PS:"mP7n  
\bXusLI!l  
17:10:14 MSG:ucid 64:POST /j_acegi_security_check HTTP/1.1 'lWgHmE  
]K0G!TR<  
%3kS;AaA  
17:10:14 MSG:ucid 64 disconnected! ORDVyb_x  
HI\V29 a  
G4<M@ET  
17:10:15 MSG:ucid 65 TCP connected from IP:140.205.225.193! ` zoC++hx  
T8t_+| ( G  
;${_eab ]  
17:10:15 MSG:ucid 65:POST /j_acegi_security_check HTTP/1.1 !,Uzt1K:  
gt \O  
N+nv#]{  
17:10:15 MSG:ucid 65 disconnected! JIOeDuw+  
&P:2`\'  
~TfN*0  
17:10:15 MSG:ucid 66 TCP connected from IP:140.205.225.193! opIbs7k-  
9%iv?/o*L  
H"b}lf  
17:10:15 MSG:ucid 66:POST /j_acegi_security_check HTTP/1.1 E``\Jre@  
0 zn }l6OS  
EC8Fapy  
17:10:15 MSG:ucid 66 disconnected! "lnI@t{o  
CFW#+U#U  
A$1Gc> C  
17:10:16 MSG:ucid 67 TCP connected from IP:140.205.225.193! ?' /#Gt`  
*-,jIaL;  
/oC@:7  
17:10:16 MSG:ucid 67:POST /j_acegi_security_check HTTP/1.1 +Ua.\1"6  
Vg^,Ky,  
=@*P})w5.  
17:10:16 MSG:ucid 67 disconnected! z/P^Bx]r  
shuoEeoo  
B!AJ*  
17:10:16 MSG:ucid 68 TCP connected from IP:140.205.225.193! j<PpCL_8%  
I~T~!^}U  
q c DJ  
17:10:16 MSG:ucid 68:POST /j_acegi_security_check HTTP/1.1 W%P$$x5&  
A|<i7QVY  
VpyqVbx1  
17:10:16 MSG:ucid 68 disconnected! B#, TdP]/  
#4Ltw ,b^  
?F^O7\rw  
17:10:17 MSG:ucid 69 TCP connected from IP:140.205.225.193! u!TMt8+c  
!n`Y^  
<o: O<p@6  
17:10:17 MSG:ucid 69:POST /j_acegi_security_check HTTP/1.1 ~ yu\vqN  
v<:/u(i  
L8~zQV$h  
17:10:17 MSG:ucid 69 disconnected! PwS7!dzH-  
W/G75o~6  
OR<%h/ \f  
17:10:17 MSG:ucid 70 TCP connected from IP:140.205.225.193! I.{%e;Reg  
UE 1tm  
'M=V{.8U  
17:10:17 MSG:ucid 70:POST /j_acegi_security_check HTTP/1.1 u iR[V~  
@WTzFjv@?4  
,Wlw#1fP  
17:10:17 MSG:ucid 70 disconnected! >*"1`vcxF  
I9hZ&ed16  
z c&i 4K  
17:10:18 MSG:ucid 71 TCP connected from IP:140.205.225.193! C7_nA:Rc  
!"bU|a  
,A;wLI  
17:10:18 MSG:ucid 71:POST /j_acegi_security_check HTTP/1.1 t$(<9  
M&5De{LS}  
>{ .|Ng4K  
17:10:18 MSG:ucid 71 disconnected! W3]?>sLE*  
Qt"i  
Xr]<v%,C  
17:10:18 MSG:ucid 72 TCP connected from IP:140.205.225.193! FSHC\8siS  
9e0t  
yBnUz"  
17:10:18 MSG:ucid 72:POST /j_acegi_security_check HTTP/1.1 _&K>fy3t&  
ldRisL  
e<duD W$X  
17:10:18 MSG:ucid 72 disconnected! hs?cV)hDS  
8w9?n3z=}  
3GM9ZPeN:  
17:10:19 MSG:ucid 73 TCP connected from IP:140.205.225.193! oWV^o8& GH  
VZCCMh-  
mM\jU5P:^  
17:10:19 MSG:ucid 73:POST /j_acegi_security_check HTTP/1.1 :za:gs0  
A?ij  
LHHDD\X   
17:10:19 MSG:ucid 73 disconnected! ySNXjH Q=  
#GIjU1-  
+~'ap'k m  
17:10:19 MSG:ucid 74 TCP connected from IP:140.205.225.193! 5v5K}hx  
9y`Vg  
^8{:RiN6e~  
17:10:19 MSG:ucid 74:POST /j_acegi_security_check HTTP/1.1 Gp}}M Gk  
1Gh3o}z  
"XWO#,Ue  
17:10:19 MSG:ucid 74 disconnected! S*S @a4lV7  
f]DO2 r  
zi= gOm  
17:10:20 MSG:ucid 75 TCP connected from IP:140.205.225.193! @{o3NR_  
_>(qQ-Px  
97MbyEE8J  
17:10:20 MSG:ucid 75:POST /j_acegi_security_check HTTP/1.1 ),&tF_z:  
#ByrX\  
g<jgR*TE`  
17:10:20 MSG:ucid 75 disconnected! mH5[(?   
I9g!#lbl  
kqt.?iJw  
17:10:20 MSG:ucid 76 TCP connected from IP:140.205.225.193! o 12w p  
A v[|G4n  
&b!|Y  
17:10:20 MSG:ucid 76:POST /j_acegi_security_check HTTP/1.1 v>E3|w%  
q.Vcb!*$  
Ncsk~=[  
17:10:20 MSG:ucid 76 disconnected!  Mt   
XS`=8FQ  
N9X`81)t  
17:10:21 MSG:ucid 77 TCP connected from IP:140.205.225.193! {5J: ]{p  
}4wIfI83K,  
*|^}=ioj*  
17:10:21 MSG:ucid 77:POST /j_acegi_security_check HTTP/1.1 ,c.(&@  
KdU&q+C^  
@&}~r  
17:10:21 MSG:ucid 77 disconnected! 0 \}%~e  
x'hUw*  
Q|i`s=|  
17:10:21 MSG:ucid 78 TCP connected from IP:140.205.225.193! 2kV{|`1  
H*VZ&{\7  
>cRE$d?  
17:10:21 MSG:ucid 78:POST /j_acegi_security_check HTTP/1.1 X+;{&Efrl  
$R_RKyXzo  
)]P%=  
17:10:21 MSG:ucid 78 disconnected! Hsvu&>[`S  
^yp`<=  
g*[DyIm  
17:10:22 MSG:ucid 79 TCP connected from IP:140.205.225.193! Ld$e  -dB  
ED=P  6u  
]] Jg%}o  
17:10:22 MSG:ucid 79:POST /j_acegi_security_check HTTP/1.1 ;+Uc} =  
q:X&)f  
aFtL_# U  
17:10:22 MSG:ucid 79 disconnected! #oQDt'  
Q~S3d  
fkW TO"f-  
17:10:22 MSG:ucid 59 disconnected! 2/M:KR  
>+ E  
CHo(:A.U>  
17:10:22 MSG:ucid 80 TCP connected from IP:140.205.225.193! AW< z7B D  
4E~!$Ustx  
ITf, )?|]Y  
17:10:22 MSG:ucid 80:POST /j_acegi_security_check HTTP/1.1 \V/;i.ng  
UKfpoDhEe  
TOvpv@?-  
17:10:22 MSG:ucid 80 disconnected! ._5"FUg  
\qB:z7I2  
[S#QGB19  
17:10:23 MSG:ucid 81 TCP connected from IP:140.205.225.193! QH.zsqf(  
nW7Ew<`Q  
3D*vNVI  
17:10:23 MSG:ucid 81:POST /j_acegi_security_check HTTP/1.1 A:5B6Z  
"2a&G3}t"  
- BE.a<  
17:10:23 MSG:ucid 81 disconnected! bX*c-r:  
"- XJZ;5  
yRGv{G[59  
17:10:23 MSG:ucid 82 TCP connected from IP:140.205.225.193! vh">Z4  
u/g4s (a  
((T0zQ7=  
17:10:23 MSG:ucid 82:POST /j_acegi_security_check HTTP/1.1 ;;; {<GEQ  
@+ee0 CLT  
 q{*4BL'  
17:10:23 MSG:ucid 82 disconnected! 0^ IHBN?9  
`SH#t3 5,  
P6 & _q  
17:10:24 MSG:ucid 83 TCP connected from IP:140.205.225.193! LtIw{* 3  
O!=ae|  
f~{@(g&Gl  
17:10:24 MSG:ucid 83:POST /j_acegi_security_check HTTP/1.1 zJ7=r#b  
2^.qKY@g@  
m\O|BMHn  
17:10:24 MSG:ucid 83 disconnected! c4AkH|  
d|?'yX  
P.Uz[_&l6  
17:10:24 MSG:ucid 84 TCP connected from IP:140.205.225.193! \Rff3$  
Yo$NE  
j4hiMI;  
17:10:24 MSG:ucid 84:POST /j_acegi_security_check HTTP/1.1 6x$1En  
P pF"n[j  
$Z8=QlG>  
17:10:24 MSG:ucid 84 disconnected! Mc #w:UH[  
PIxd'B*MF  
z%cpV{Nu  
17:10:25 MSG:ucid 85 TCP connected from IP:140.205.225.193! 6JYVC>i  
8ezdU"  
; Fi(zl  
17:10:25 MSG:ucid 85:POST /j_acegi_security_check HTTP/1.1 S3G9/  
R zOs,  
~_ 8X%ut y  
17:10:25 MSG:ucid 85 disconnected! #Oeb3U  
&`RD5uml  
\.`;p  
17:10:25 MSG:ucid 86 TCP connected from IP:140.205.225.193! M'n2j  
ey~5DY7  
m4<5jC`-M  
17:10:25 MSG:ucid 86:POST /j_acegi_security_check HTTP/1.1 "\x<Zg;  
Hj>(kL9H  
jOYa}jm?  
17:10:25 MSG:ucid 86 disconnected! m~#f L  
gyt[ZN_2  
!Rq.L  
17:10:26 MSG:ucid 87 TCP connected from IP:140.205.225.193! Fbpe`pS+V  
E=-ed9({:  
3($cBC  
17:10:26 MSG:ucid 87:POST /j_acegi_security_check HTTP/1.1 gB;5&;T:  
UcHe"mn  
s?:&#  
17:10:26 MSG:ucid 87 disconnected! 1^x "P#u  
zXop@"(e  
Q||v U  
17:10:27 MSG:ucid 88 TCP connected from IP:140.205.225.193! LR:v$3 G(  
/Vg=+FEO  
_{]\} =@  
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 f6I$d<  
C V{kP8#  
pn:) Rq0  
17:10:37 MSG:ucid 88 disconnected!  ?)_?YLi  
b.LMJ'1  
J@Qt(rRxi  
17:10:42 MSG:ucid 89 TCP connected from IP:140.205.225.193! $j+RUelFY  
BrHw02G  
4dEfXrMf  
17:10:42 MSG:ucid 89:GET /pmd/index.php HTTP/1.1 xzZ2?z Wi  
F1Jd-3ei  
_|'e Az   
17:10:52 MSG:ucid 89 disconnected! OH(w3:;[8  
)g()b"Z #>  
B$ Z%_j&  
17:10:57 MSG:ucid 90 TCP connected from IP:140.205.225.193! ~yGD("X  
!T'`L{Sj  
vuNt+  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 69 >-  
l"{1v ~I  
ZM6`:/lc  
17:11:07 MSG:ucid 90 disconnected! Z7="on4  
v_ U$jjO1  
>!U oS  
17:11:12 MSG:ucid 91 TCP connected from IP:140.205.225.193! <-]qU}-  
)$> pu{o  
(}#8$ )  
17:11:12 MSG:ucid 91:GET /phpMyAdmin/index.php HTTP/1.1 NrVE[Z#  
|= o)|z2  
Fv<^\q  
17:11:22 MSG:ucid 91 disconnected! @MoBR.  
tbH` VD"u  
5Al1u|;HB  
17:11:27 MSG:ucid 92 TCP connected from IP:140.205.225.193! *%nV<}e^_=  
h:4Uv}Z  
6w"_sK?  
17:11:27 MSG:ucid 92:GET /pma/index.php HTTP/1.1 xk#q_!(j  
 v<_wf  
_,ki/7{  
17:11:37 MSG:ucid 92 disconnected! k(]R;`f$W  
xnR;#Yc  
- K@mjN  
17:11:42 MSG:ucid 93 TCP connected from IP:140.205.225.193! *3Vic  
UqA<rW  
M SnRx*-  
17:11:42 MSG:ucid 93:GET /pmd/index.php HTTP/1.1 \se /2l  
BKV,V/*p  
Fs3rsig  
17:11:52 MSG:ucid 93 disconnected! %aB RL6  
Bw{enf$vR  
<b,oF]+;z  
17:12:05 MSG:ucid 94 TCP connected from IP:140.205.225.193! r3BQo[ 't  
yU{Q`6u T  
WSKubn?7B  
17:12:08 MSG:ucid 94 disconnected!  n$u@v(I  
,pHQv(K/  
LK}*k/eG  
17:14:33 MSG:httpsrv stop success!
[ 此帖被jiangyong在2017-05-19 17:44重新编辑 ]
级别: 小白
发帖
27
云币
31
只看该作者 沙发  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
基本就是这些; B4M rrW4=  
GET / HTTP/1.1 k5@PZFV  
GET /clusters.jsf HTTP/1.1 &~K4I  
GET /jenkins/ HTTP/1.1 )#Le"&D  
GET /zabbix/ HTTP/1.1 QnTKo&|9  
GET /solr/ HTTP/1.1 Rh,a4n?W  
GET /j_acegi_security_check HTTP/1.1 Kk\TW1w3  
POST /j_acegi_security_check HTTP/1.1 {bP )Fon  
=3dR-3  
GET不到j_acegi_security_check 就不断的POST,程序根本就是不支持POST命令。
级别: 小白
发帖
27
云币
31
只看该作者 板凳  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 c\le8C3  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 O)8$aAJ)V  
~$jRn(2  
GET这些又是啥子意思呢?
级别: 分析狮
发帖
1644
云币
1791
只看该作者 地板  发表于: 05-20
云盾安全扫描,避免爆.破
发表主题 回复主题
« 返回列表上一主题下一主题

限100 字节
如果您在写长篇帖子又不马上发表,建议存为草稿
 
验证问题: ECS是阿里云提供的什么服务? 正确答案:云服务器
上一个 下一个