阿里云
发表主题 回复主题
  • 449阅读
  • 3回复

[求助]把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。

级别: 小白
发帖
27
云币
31
己写了一个简易的http协议升级wesocket协议,绑定到8080端口,又不是标准的http协议80端口,为何阿里要用http协议来扫描8080端口。下面是记录的日志(只开了10分钟): Dz2Z (EXI~  
S{MB$JA  
)OQ<H.X  
17:01:39 MSG:ucid 1 TCP connected from IP:120.132.3.151! [x=(:soEqC  
2g_mQT  
x)$0Nr62D  
17:01:39 MSG:ucid 2 TCP connected from IP:120.132.3.151! !vK0|eV3  
,|z zq@fk  
d2U?rw_  
17:01:39 MSG:ucid 3 TCP connected from IP:120.132.3.151! ofz?L#:2  
_p9"MU&}  
!z2xm3s{]p  
17:01:39 MSG:ucid 3:GET http://www.qq.com/404/search_children.js HTTP/1.1 )~"0d;6_  
HFyQ$pbBU  
!.pcldx  
17:01:39 MSG:ucid 3 disconnected! x\:KfYr4Y;  
z_KCG2=5  
UpSJ%%.n  
17:01:44 MSG:ucid 1 disconnected! &0G9v  
;:R2 P@6f  
#k>A,  
17:01:44 MSG:ucid 2 disconnected! R/E6n &R  
EASmB  
4 eSFpy1  
17:08:08 MSG:ucid 4 TCP connected from IP:140.205.225.193! ,-(D (J;}1  
>/}p{Tj  
fF#Fc&B  
17:08:08 MSG:ucid 4:GET / HTTP/1.1 )^6Os2  
l1L8a I,8  
N6+^}2' *)  
17:08:08 MSG:ucid 4 disconnected! y | I9"R  
X+,0;% p  
~mK +Q%G5  
17:08:14 MSG:ucid 5 TCP connected from IP:140.205.225.193! V=1zk-XC  
Tj<B;f!u  
}o[<1+W(.  
17:08:14 MSG:ucid 5:GET / HTTP/1.1 ` ` Yk  
B~& }Mv  
cQBc6eAi  
17:08:14 MSG:ucid 5 disconnected! d`5AQfL&  
JxLfDr,dy  
LH`2Y,E  
17:08:34 MSG:ucid 6 TCP connected from IP:140.205.225.193! NNE(jJ`/  
Y"s8j=1m  
.J+F H G'  
17:08:34 MSG:ucid 6:GET / HTTP/1.1 EymSrZw  
cg9}T[A  
cF9oo%3  
17:08:34 MSG:ucid 6 disconnected! Q%J,: J  
V3a6QcG  
tuuwoiQ*`  
17:08:38 MSG:ucid 7 TCP connected from IP:140.205.225.193! y; <}`  
!)W#|sys&  
E:PPb9Kd  
17:08:38 MSG:ucid 7:GET /clusters.jsf HTTP/1.1 \l 8_aj  
M_r[wYt!  
B8.}9  
17:08:38 MSG:ucid 7 disconnected! MpJ<.|h  
r{S DJa  
.4$F~!aj9  
17:09:16 MSG:ucid 8 TCP connected from IP:140.205.225.193! &1`Y&x:p  
YmjA!n  
8$ #z>  
17:09:16 MSG:ucid 8:GET / HTTP/1.1 ]\L+]+u~  
ZBN,%P!P0  
r=A A /n<  
17:09:16 MSG:ucid 8 disconnected! pFwJ:  
~3f|-%Z  
y*US^HJOZ  
17:09:17 MSG:ucid 9 TCP connected from IP:140.205.225.193! I Xm[c@5l  
*n[B Bz  
9nFWJn  
17:09:17 MSG:ucid 9:GET /jenkins/ HTTP/1.1 h.l.da1#  
 M}@>h  
Y> }\'$\b  
17:09:17 MSG:ucid 9 disconnected! ;)P=WS:=  
IA]wO%c  
|GsMLY:0  
17:09:18 MSG:ucid 10 TCP connected from IP:140.205.225.193! VEn3b  
_Rk vg-  
Em5,Zr_  
17:09:18 MSG:ucid 10:GET /zabbix/ HTTP/1.1 |3Oyg?2  
I|<]>D-8  
zDbO~.d  
17:09:18 MSG:ucid 10 disconnected! v9S=$Aj  
NuUiW*|`7  
c14d0x{  
17:09:18 MSG:ucid 11 TCP connected from IP:140.205.225.193! RO%M9LISI  
@EyB^T/  
UX<-jY#'V  
17:09:18 MSG:ucid 11:GET / HTTP/1.1 o)7Ot\:E  
W3\E; C-g0  
v2p0EOS  
17:09:19 MSG:ucid 11 disconnected! ?TK`sGy  
t,*1=S5  
h{$k%YJ?  
17:09:20 MSG:ucid 12 TCP connected from IP:140.205.225.193! ,9_O4O%  
i^ |G  
$?]`2*i  
17:09:20 MSG:ucid 12:GET / HTTP/1.1 4dLnX3 v  
j6XHH&ZEb  
.y3E @0a  
17:09:20 MSG:ucid 12 disconnected! A*81}P_  
tY!l}:E[  
]vn*eqd  
17:09:20 MSG:ucid 13 TCP connected from IP:140.205.225.193! O"\_%=X9  
V@b7$z  
&NoA, `|7  
17:09:20 MSG:ucid 13:GET /solr/ HTTP/1.1 qBh@^GxY),  
dJJq]^|  
j2u'5kJ G  
17:09:20 MSG:ucid 13 disconnected! m{X{h4t  
Jvsy 6R  
?E|=eO"I1  
17:09:50 MSG:ucid 14 TCP connected from IP:140.205.225.193! {f)aFGp  
SG|AJ9  
vcp{Gf|^  
17:09:50 MSG:ucid 14:GET /j_acegi_security_check HTTP/1.1 fHEIys,{  
/Wjc\n$'  
JehanF[  
17:09:50 MSG:ucid 14 disconnected! .KC V|x;QW  
fKqr$59>  
-s`Wd4AP  
17:09:50 MSG:ucid 15 TCP connected from IP:140.205.225.193! V6HZvuXV!  
.ve_If-Hg  
]w _&%mB  
17:09:50 MSG:ucid 15:POST /j_acegi_security_check HTTP/1.1 A46q`l9B  
FK~wr;[  
d v[.u{#tP  
17:09:50 MSG:ucid 15 disconnected! f77W{T4  
3ej237~F,L  
W,Q>3y*  
17:09:51 MSG:ucid 16 TCP connected from IP:140.205.225.193! .d^8?vo  
DzE^FY  
U+ ik& R#  
17:09:51 MSG:ucid 16:POST /j_acegi_security_check HTTP/1.1 Ao`e{  
R=E4Sh  
#<9'{i3  
17:09:51 MSG:ucid 16 disconnected! ;w"h n*  
?&eS}skL  
|^UQVNJ  
17:09:51 MSG:ucid 17 TCP connected from IP:140.205.225.193! f~a 7E;y  
U2<q dknB  
9=]HOUn  
17:09:51 MSG:ucid 17:POST /j_acegi_security_check HTTP/1.1 @#t<!-8d  
f&^}yqmuE  
(UjaL@G  
17:09:51 MSG:ucid 17 disconnected! U= f9b]Y  
XdV>6<gf{  
3I( n];  
17:09:52 MSG:ucid 18 TCP connected from IP:140.205.225.193! x/M$_E<G  
hOZTD0  
">t^jt{  
17:09:52 MSG:ucid 18:POST /j_acegi_security_check HTTP/1.1 E.NfVeq  
8WP"~Js!  
HP[B%  
17:09:52 MSG:ucid 18 disconnected! K\xM%O?  
">1wPq&  
4C_1wk('  
17:09:52 MSG:ucid 19 TCP connected from IP:140.205.225.193! e#h&Xa  
W? 4:sLC#3  
GiuE\J9i  
17:09:52 MSG:ucid 19:POST /j_acegi_security_check HTTP/1.1 v+Y^mV`|  
DeF`#a0E  
L,#YP#O,j  
17:09:52 MSG:ucid 19 disconnected! T>| hID  
!\%JOf}  
F3!@|/<w  
17:09:53 MSG:ucid 20 TCP connected from IP:140.205.225.193! F1$XUos9  
Eb9h9sjv  
B\rY\  
17:09:53 MSG:ucid 20:POST /j_acegi_security_check HTTP/1.1 e> 9X  
]O:8o<0  
)#\3c,<Y  
17:09:53 MSG:ucid 20 disconnected! iN'T^+um=  
<#M1I!R  
X4hz\={  
17:09:53 MSG:ucid 21 TCP connected from IP:140.205.225.193! ]SU)L5Dt;  
jA:'P~`Hj  
0H +nVR  
17:09:53 MSG:ucid 21:POST /j_acegi_security_check HTTP/1.1 ~x'8T!M{  
?F[_5ls|]  
D}!YF~  
17:09:53 MSG:ucid 21 disconnected! Z P|k3   
ZyNgG9JL]  
L6nsVL&  
17:09:54 MSG:ucid 22 TCP connected from IP:140.205.225.193! Fng  
ERK{smL  
:/][ n9J^  
17:09:54 MSG:ucid 22:POST /j_acegi_security_check HTTP/1.1 lj&\F|-i  
ynMYf  
_I'k&R  
17:09:54 MSG:ucid 22 disconnected! qrw*?6mSQ  
Y}.f&rLe  
SFuSM/Pf  
17:09:54 MSG:ucid 23 TCP connected from IP:140.205.225.193! X{!,j}  
*< fJgc"3  
S\I+UeFkf  
17:09:54 MSG:ucid 23:POST /j_acegi_security_check HTTP/1.1 ^5~x*=_  
~0-)S@  
WixEnsJ  
17:09:54 MSG:ucid 23 disconnected! `]GL3cIh:  
%K\B )HR  
e&ZTRgYdi  
17:09:55 MSG:ucid 24 TCP connected from IP:140.205.225.193! d<OdQvW.  
$d-yG553  
xgNV0;g,  
17:09:55 MSG:ucid 24:POST /j_acegi_security_check HTTP/1.1 ZWuNl!l>  
Xu#?Lw  
ESIJ QM-[+  
17:09:55 MSG:ucid 24 disconnected! p_n$}z  
Moi RAO  
C{l-l`:  
17:09:55 MSG:ucid 25 TCP connected from IP:140.205.225.193! tJtp1$h  
+[ir7?Y.  
w0sy@OF  
17:09:55 MSG:ucid 25:POST /j_acegi_security_check HTTP/1.1 JCZ&TK  
s` , g4ce`  
{uZ|Oog(p  
17:09:55 MSG:ucid 25 disconnected! r0&LjH&R  
}4c$_  
5?(dI9A"K  
17:09:56 MSG:ucid 26 TCP connected from IP:140.205.225.193! Eoo[H2=^H  
z8D,[`  
D"fjk1  
17:09:56 MSG:ucid 26:POST /j_acegi_security_check HTTP/1.1 g?j^d:  
P$ b5o  
fD_3lbiL(  
17:09:56 MSG:ucid 26 disconnected! f<<$!]\  
_q@lP|  
 ]5ibg"{S  
17:09:56 MSG:ucid 27 TCP connected from IP:140.205.225.193! 67Tu8I/r  
MScUrW!TA  
-biw{  
17:09:56 MSG:ucid 27:POST /j_acegi_security_check HTTP/1.1 l:#'i`;   
'}>8+vU`  
& }"I!  
17:09:56 MSG:ucid 27 disconnected! 1T,Bd!g  
DEfhR?v  
mkBQ TQGT  
17:09:57 MSG:ucid 28 TCP connected from IP:140.205.225.193! > -fXn  
.'-t>(}v  
OWYY2&.h  
17:09:57 MSG:ucid 28:POST /j_acegi_security_check HTTP/1.1 9(KffnE^  
K TE*Du  
#fyY37-  
17:09:57 MSG:ucid 28 disconnected! pFo,@M  
t3Iij0b~  
D2:ShyYAS  
17:09:57 MSG:ucid 29 TCP connected from IP:140.205.225.193! p1z^i(  
"(+aWvb  
*Hh*!ePp  
17:09:57 MSG:ucid 29:GET /phpmyadmin/index.php HTTP/1.1 !E *IktAI  
9*?YES'6  
xkaed  
17:09:57 MSG:ucid 30 TCP connected from IP:140.205.225.193! kY~yA2*G  
:3}K$  
N,cj[6;T%  
17:09:57 MSG:ucid 30:POST /j_acegi_security_check HTTP/1.1 $T2zs$  
<2+FE/3L  
+ k   
17:09:57 MSG:ucid 30 disconnected! @c,=c+-  
mj2sbRiSR=  
-dUXd<=ue  
17:09:58 MSG:ucid 31 TCP connected from IP:140.205.225.193!  $)(Zt^  
Fi+,omB&  
gLg\W3TOi  
17:09:58 MSG:ucid 31:POST /j_acegi_security_check HTTP/1.1 ??P> HVx  
8O^z{Yh7  
16N`xw+{  
17:09:58 MSG:ucid 31 disconnected! t\<*Q3rl-  
]G=^7O]`C!  
4+0:(=>[%  
17:09:58 MSG:ucid 32 TCP connected from IP:140.205.225.193! LoS%  FI  
bEzy KrN\  
2FTJxSC  
17:09:58 MSG:ucid 32:POST /j_acegi_security_check HTTP/1.1 IAbH_+7O  
N5fMMi(O  
7(5 wP(  
17:09:58 MSG:ucid 32 disconnected! mz .uK2l{  
T(eNK c2  
cU=EXyP%  
17:09:59 MSG:ucid 33 TCP connected from IP:140.205.225.193! EF'U`\gX  
If.hA}  
,W;2A0A?X  
17:09:59 MSG:ucid 33:POST /j_acegi_security_check HTTP/1.1  Hh<}~s  
0o&7l%Y/  
l'(7p`?  
17:09:59 MSG:ucid 33 disconnected! km!jxs  
3sBu`R*hk  
I78huYAYA  
17:09:59 MSG:ucid 34 TCP connected from IP:140.205.225.193! I=yy I  
B976{;QvXV  
e@crM'R7Lo  
17:09:59 MSG:ucid 34:POST /j_acegi_security_check HTTP/1.1 L [7Aa"R  
D& #ph%U,P  
62%=%XD  
17:09:59 MSG:ucid 34 disconnected! :+\B|*T2.L  
n8>( m,  
*H%Jgz,  
17:10:00 MSG:ucid 35 TCP connected from IP:140.205.225.193! Q68q76  
cYp]zn+6  
[CJr8Qn  
17:10:00 MSG:ucid 35:POST /j_acegi_security_check HTTP/1.1 VE5M}kDCZ  
IHtNaN )  
 h48 jKL(  
17:10:00 MSG:ucid 35 disconnected! :Sd iG=t  
0SLS;s.GX  
t#6@~49  
17:10:00 MSG:ucid 36 TCP connected from IP:140.205.225.193! p+ bT{:  
v9s /!<j  
&]Q\@;]Aq  
17:10:00 MSG:ucid 36:POST /j_acegi_security_check HTTP/1.1 Fv"jKZPgzz  
8n^v,s>  
=tE7XC3X_  
17:10:00 MSG:ucid 36 disconnected! 6{p] cr  
L<**J\=7M  
)a%kAUNj  
17:10:01 MSG:ucid 37 TCP connected from IP:140.205.225.193! (\<#fkeH  
UfnjhHu  
Ec^x  
17:10:01 MSG:ucid 37:POST /j_acegi_security_check HTTP/1.1 4<`'?  
3-5X^!C  
g~JN"ap  
17:10:01 MSG:ucid 37 disconnected! i?&g;_n^  
pIy+3&\e;  
2#bpWk9  
17:10:01 MSG:ucid 38 TCP connected from IP:140.205.225.193! 2Po e-=  
!Z*2X ^  
'%$)"g]/#  
17:10:01 MSG:ucid 38:POST /j_acegi_security_check HTTP/1.1 :NJ(QkTZv  
,dM}B-  
t_PAXj  
17:10:01 MSG:ucid 38 disconnected! `|\z#Et  
Rh:edQ #  
&xG>"sJ  
17:10:02 MSG:ucid 39 TCP connected from IP:140.205.225.193! m4.IaBn/  
a.r+>44M  
Qb}1tn)  
17:10:02 MSG:ucid 39:POST /j_acegi_security_check HTTP/1.1 JlZU31Xws  
WxB}Uh  
J1Ay^*qRU  
17:10:02 MSG:ucid 39 disconnected! 8%qHy1  
Hvto]~=GQ  
u&HLdSHe  
17:10:02 MSG:ucid 40 TCP connected from IP:140.205.225.193! =N5~iMorD-  
MY]Z@  
u dhj$:t  
17:10:02 MSG:ucid 40:POST /j_acegi_security_check HTTP/1.1 =@F1J7  
~@=*JzP?  
,U\F <$O  
17:10:02 MSG:ucid 40 disconnected! Bw ]Y7 1  
{=5Wi|  
g q|T:  
17:10:03 MSG:ucid 41 TCP connected from IP:140.205.225.193! aXAV`%b  
" Zo<$p3]  
Sz.sX w;  
17:10:03 MSG:ucid 41:POST /j_acegi_security_check HTTP/1.1 Oq-O|qJj  
.Du-~N4\  
uAd4 Zz  
17:10:03 MSG:ucid 41 disconnected! %|&WcpQR  
u|v2J/_5Y  
VM 3~W  
17:10:03 MSG:ucid 42 TCP connected from IP:140.205.225.193! zJhG`iWFw  
KCE5Z?k  
>}& :y{z~  
17:10:03 MSG:ucid 42:POST /j_acegi_security_check HTTP/1.1 vkFq/+'U  
&LRO^[d  
f@3?kM(  
17:10:03 MSG:ucid 42 disconnected! ;7jszs.6%  
=Oo=&vA.oc  
ws!pp\F  
17:10:04 MSG:ucid 43 TCP connected from IP:140.205.225.193! z}'-gv\,  
Ev adY  
ID/=YG@  
17:10:04 MSG:ucid 43:POST /j_acegi_security_check HTTP/1.1 N:"S/G>r ;  
tZW2TUM]  
2pKkg>/S  
17:10:04 MSG:ucid 43 disconnected! U3R;'80 f  
8`QbUQ6  
|ia#Elavo  
17:10:04 MSG:ucid 44 TCP connected from IP:140.205.225.193! C`4m#  
%\i OX|F_  
JDp"!x{O  
17:10:04 MSG:ucid 44:POST /j_acegi_security_check HTTP/1.1 d:j65yu  
F$tshe(  
u,E_Ezq  
17:10:04 MSG:ucid 44 disconnected! 8S@"6TG`  
yUX<W'-Hev  
L YMb)=u]  
17:10:05 MSG:ucid 45 TCP connected from IP:140.205.225.193! 0GcOI}  
13MB1n  
Df}3^J~JX  
17:10:05 MSG:ucid 45:POST /j_acegi_security_check HTTP/1.1 0:zDt~Ju  
8RJa;JsH  
D)J'xG_<O  
17:10:05 MSG:ucid 45 disconnected! +5ue) `  
gFw- P#t  
)"&\S6*!  
17:10:05 MSG:ucid 46 TCP connected from IP:140.205.225.193! giu8EjzK  
l~$Od jf  
~.TKzh'eB  
17:10:05 MSG:ucid 46:POST /j_acegi_security_check HTTP/1.1  F!&_  
y3NMt6  
ZO!)G   
17:10:05 MSG:ucid 46 disconnected! x#TWZ;  
ARa9Ia{@  
KI8Q =*  
17:10:06 MSG:ucid 47 TCP connected from IP:140.205.225.193!  -TKQfd  
q)KLf\  
h2fTG  
17:10:06 MSG:ucid 47:POST /j_acegi_security_check HTTP/1.1 PU{7s  
1F58 2 l  
$XO#qOW  
17:10:06 MSG:ucid 47 disconnected! c!}f\ ]D  
7K}Sk  
%b(non*  
17:10:06 MSG:ucid 48 TCP connected from IP:140.205.225.193! KgMW  
En]+mIEo  
}^Kye23  
17:10:06 MSG:ucid 48:POST /j_acegi_security_check HTTP/1.1 nkvkHh  
fb||q-E  
G~;hD-D~.  
17:10:06 MSG:ucid 48 disconnected! Q-LDFnOFwp  
09 >lx$  
C/L+:b&x~  
17:10:07 MSG:ucid 49 TCP connected from IP:140.205.225.193! umD[4aP~;  
P6cc8x9g(  
q:D!@+U  
17:10:07 MSG:ucid 49:POST /j_acegi_security_check HTTP/1.1 yIdM2#`u  
6s"Erq5q  
-}O>m}l  
17:10:07 MSG:ucid 49 disconnected! TdAHw @(  
!MiH^wP  
?/,sKF74i  
17:10:07 MSG:ucid 29 disconnected!  p|D-ez8  
"c  S?t  
|# zznT"  
17:10:07 MSG:ucid 50 TCP connected from IP:140.205.225.193! n?QpVROo\  
f;(]P  
/ !*gH1 s  
17:10:07 MSG:ucid 50:POST /j_acegi_security_check HTTP/1.1 :X`Bc"  
om"q[Tudc  
%0PZZl5b  
17:10:07 MSG:ucid 50 disconnected! .kT5 4U;{  
LW;UL}av  
?^F#}>C  
17:10:08 MSG:ucid 51 TCP connected from IP:140.205.225.193! G}tq'#]E{z  
<mc[-To  
{.We%{4V  
17:10:08 MSG:ucid 51:GET /j_acegi_security_check HTTP/1.1 9Q".166  
]FLuiC  
Te"<.0~1  
17:10:08 MSG:ucid 51 disconnected! 8VLr*83~8  
w+cI0lj  
1anV!&a<K(  
17:10:09 MSG:ucid 52 TCP connected from IP:140.205.225.193! _4z>I/R>Z  
yZaQ{]"  
Gb%PBg}HH  
17:10:09 MSG:ucid 52:POST /j_acegi_security_check HTTP/1.1 O'deQq[  
SZ-%0z  
Q]7Q4U  
17:10:09 MSG:ucid 52 disconnected! uH]n/Kv1,  
hHoc7  
K/Axojo  
17:10:09 MSG:ucid 53 TCP connected from IP:140.205.225.193! R+Ke|C  
ltHC+8 aZ  
?S!lX[#v  
17:10:09 MSG:ucid 53:POST /j_acegi_security_check HTTP/1.1 @ky5X V  
+98~OInySZ  
sl%B-;@I  
17:10:09 MSG:ucid 53 disconnected! eUqsvF}l!  
)T?w,"kI  
y{K~g<VL  
17:10:10 MSG:ucid 54 TCP connected from IP:140.205.225.193! W3 2mAz;  
Y cO tPS%  
^fS~va  
17:10:10 MSG:ucid 54:POST /j_acegi_security_check HTTP/1.1 ~|Gtm[9Ru  
8!me$k&  
l[Ng8[R  
17:10:10 MSG:ucid 54 disconnected! u;~/B[  
GIo&zPx  
] 2FS=  
17:10:10 MSG:ucid 55 TCP connected from IP:140.205.225.193! t1g)Y|@d  
N}VKH5U|  
(Pc:A! }  
17:10:10 MSG:ucid 55:POST /j_acegi_security_check HTTP/1.1 O)`R)MQ)  
QF'N8Kla  
id&;  
17:10:10 MSG:ucid 55 disconnected! 7DKbuUK  
EmVE<kY .  
#G$_\bt  
17:10:11 MSG:ucid 56 TCP connected from IP:140.205.225.193! sR +=<u1  
-+#\WB{AI  
jzdK''CHi  
17:10:11 MSG:ucid 56:POST /j_acegi_security_check HTTP/1.1 rrwBsa3  
tO)mKN+ (  
vtv|H  
17:10:11 MSG:ucid 56 disconnected! m/Q@-  
75jq+O_:  
g"FG7E&  
17:10:11 MSG:ucid 57 TCP connected from IP:140.205.225.193! JC_Y#kN@z  
C~yfuPr\B  
z\sy~DM;>  
17:10:11 MSG:ucid 57:POST /j_acegi_security_check HTTP/1.1 ZXY5Xvt:v  
B-@6m  
zy"L%i  
17:10:11 MSG:ucid 57 disconnected! (Ub=sC  
_*>bf G  
j#f+0  
17:10:12 MSG:ucid 58 TCP connected from IP:140.205.225.193! 0~iC#lHO  
r`qMif'  
6iV jAxR  
17:10:12 MSG:ucid 58:POST /j_acegi_security_check HTTP/1.1 puF'w:I (  
"o 2p|2c  
HgvgO\`]  
17:10:12 MSG:ucid 58 disconnected! ! @{rk p  
Sf);j0G,D  
\V  /s  
17:10:12 MSG:ucid 59 TCP connected from IP:140.205.225.193! CoDu|M%  
e^&QT  
RrSSAoz1  
17:10:12 MSG:ucid 59:GET /phpMyAdmin/index.php HTTP/1.1 :y==O4  
` wuA}v3!  
o,[~7N  
17:10:12 MSG:ucid 60 TCP connected from IP:140.205.225.193! ] e!CH <N  
LTj;e[  
/+l3 BeL  
17:10:12 MSG:ucid 60:POST /j_acegi_security_check HTTP/1.1 )^7Y^u e  
79U Th@r}  
L&=j O0_  
17:10:12 MSG:ucid 60 disconnected! Qj5~ lX`W  
!<H[h4g  
4o8uWS{`  
17:10:13 MSG:ucid 61 TCP connected from IP:140.205.225.193! Q}FDu,  
 Q];gC{I  
^8$CpAK]M  
17:10:13 MSG:ucid 61:POST /j_acegi_security_check HTTP/1.1 pW7vY)hj  
|!{Q4<  
?z%@;&  
17:10:13 MSG:ucid 61 disconnected! lA {  
_ vVw2HH  
$T{,3;kt  
17:10:13 MSG:ucid 62 TCP connected from IP:140.205.225.193! fL.;-  
jT"P$0sJAd  
*vv <@+gA  
17:10:13 MSG:ucid 62:POST /j_acegi_security_check HTTP/1.1 m6^Ua  
*F*c  
H=] )o2 1  
17:10:13 MSG:ucid 62 disconnected! C\Q3vG  
6TJ5G8z_  
W)JUMW2|  
17:10:14 MSG:ucid 63 TCP connected from IP:140.205.225.193! /Y5I0Ko Uw  
~fw 6sY#  
'<~rV  
17:10:14 MSG:ucid 63:POST /j_acegi_security_check HTTP/1.1 ! utgo/n  
E9pKR+P  
j b1OcI%  
17:10:14 MSG:ucid 63 disconnected! / U1VE|T  
z1}YoCj1  
*bRer[7y  
17:10:14 MSG:ucid 64 TCP connected from IP:140.205.225.193! 6G6Hg&B  
a OR}  
dVc;Tt  
17:10:14 MSG:ucid 64:POST /j_acegi_security_check HTTP/1.1 2!f0!<te  
g`)3m,\  
(y|{^@  
17:10:14 MSG:ucid 64 disconnected! K+2bN KZ0  
(bt^L3}a  
SdC505m0*  
17:10:15 MSG:ucid 65 TCP connected from IP:140.205.225.193! %(;jx  
I=D{(%+^d  
A> +5~u  
17:10:15 MSG:ucid 65:POST /j_acegi_security_check HTTP/1.1 j>gO]*BX~  
Ek _k_!  
yd "|HHx  
17:10:15 MSG:ucid 65 disconnected! S1uW`zQ!+_  
g*t.g@B<2  
?# >|P-4  
17:10:15 MSG:ucid 66 TCP connected from IP:140.205.225.193! ({D.oS  
;w4rwL  
GW'=/ z7  
17:10:15 MSG:ucid 66:POST /j_acegi_security_check HTTP/1.1 N\H{p %8  
]=9%fA  
x)G/YUv76  
17:10:15 MSG:ucid 66 disconnected! T1PWFw\GH  
0'^? m$  
\ :})R{  
17:10:16 MSG:ucid 67 TCP connected from IP:140.205.225.193! )[9L|o5D  
-iBu:WyY$  
)~d2`1zGS  
17:10:16 MSG:ucid 67:POST /j_acegi_security_check HTTP/1.1 b_V)]>v+  
RfN5X}&A  
Btpx[T  
17:10:16 MSG:ucid 67 disconnected! Vz 5:73  
iCAd7=o  
#l;Ekjfz  
17:10:16 MSG:ucid 68 TCP connected from IP:140.205.225.193! < ]wN/B-8J  
= 1}-]ctVn  
C dZ;ZR  
17:10:16 MSG:ucid 68:POST /j_acegi_security_check HTTP/1.1 M?nnpO  
SI;G|uO;/  
r.K4<ly-N  
17:10:16 MSG:ucid 68 disconnected! Jr''S}@|x  
2tWUBt\,g  
FswFY7 8  
17:10:17 MSG:ucid 69 TCP connected from IP:140.205.225.193! U_VD* F4Bv  
p{-1%jQ}]  
*JpEBtTv=5  
17:10:17 MSG:ucid 69:POST /j_acegi_security_check HTTP/1.1 UBU(@T(  
RM i 2Ip  
eQ9x l  
17:10:17 MSG:ucid 69 disconnected! fptW#_V2  
V_ ]4UE  
-8pHjry'q  
17:10:17 MSG:ucid 70 TCP connected from IP:140.205.225.193! 6u.b?_u  
A?7%q^;E  
2i>xJMW  
17:10:17 MSG:ucid 70:POST /j_acegi_security_check HTTP/1.1 )0GnTB;5Z  
PO}Q8Q3  
t|y4kM  
17:10:17 MSG:ucid 70 disconnected! r2<+ =INn  
I{Kc{MXn  
H?~u%b@   
17:10:18 MSG:ucid 71 TCP connected from IP:140.205.225.193! 21WqLgT3 4  
b1& {%.3[  
pIrAGA;  
17:10:18 MSG:ucid 71:POST /j_acegi_security_check HTTP/1.1 8bysg9H0  
<.' cCY  
cwD0 ~B  
17:10:18 MSG:ucid 71 disconnected! Xo*$|9[.  
q+:(@w6  
8qc %{8  
17:10:18 MSG:ucid 72 TCP connected from IP:140.205.225.193! oy`m:Xp  
%1<p1u'r?#  
?dmMGm0T9  
17:10:18 MSG:ucid 72:POST /j_acegi_security_check HTTP/1.1 X or ,}. w  
k1U~S`>$  
]Tl\9we  
17:10:18 MSG:ucid 72 disconnected! X|QCa@Foe  
|)4$\<d  
]dK]a:S  
17:10:19 MSG:ucid 73 TCP connected from IP:140.205.225.193! u20b+c4  
5 muW*7  
&0eB@8{N  
17:10:19 MSG:ucid 73:POST /j_acegi_security_check HTTP/1.1 L@_">' pR  
PM.SEzhm  
by U\I5  
17:10:19 MSG:ucid 73 disconnected! ],YYFU}  
N Sh.g #  
Crhi+D  
17:10:19 MSG:ucid 74 TCP connected from IP:140.205.225.193! # VV.[ N  
;F""}wzn  
!~N4}!X3du  
17:10:19 MSG:ucid 74:POST /j_acegi_security_check HTTP/1.1 I PVzV\o  
,/:a77  
|{PJT#W%  
17:10:19 MSG:ucid 74 disconnected! =[K)<5,@  
B -~&6D,  
yOK])&c  
17:10:20 MSG:ucid 75 TCP connected from IP:140.205.225.193! !"J#,e|  
(`]*Y(/2G  
unnx#e]  
17:10:20 MSG:ucid 75:POST /j_acegi_security_check HTTP/1.1 ^A[`NYK  
B#6pQp$  
,GJ>vT)  
17:10:20 MSG:ucid 75 disconnected! +q j*P9  
$XQxWH|  
&U~r}=  
17:10:20 MSG:ucid 76 TCP connected from IP:140.205.225.193! )c*k _/ 4  
3EVC8ue  
&@HNz6KO  
17:10:20 MSG:ucid 76:POST /j_acegi_security_check HTTP/1.1 E^ok`wfO  
[u9JL3  
]rg+n c3  
17:10:20 MSG:ucid 76 disconnected! )6>|bmpU  
e$EF% cKH  
N 2"3~  #  
17:10:21 MSG:ucid 77 TCP connected from IP:140.205.225.193! 2d2@J{  
>yBxa)  
"P'&+dH8  
17:10:21 MSG:ucid 77:POST /j_acegi_security_check HTTP/1.1 t\pK`DM-[  
V 7l{hEo3?  
%R|"Afa=  
17:10:21 MSG:ucid 77 disconnected! "Ug/ ',jkV  
7y)=#ZG'R  
4`6c28K0?  
17:10:21 MSG:ucid 78 TCP connected from IP:140.205.225.193! c',:@2R  
P-+M,>vNy[  
$% Ci8p  
17:10:21 MSG:ucid 78:POST /j_acegi_security_check HTTP/1.1 < m enABN4  
Q)Iv_N/  
;T.s!B$Uu  
17:10:21 MSG:ucid 78 disconnected! fJWxJSdi  
sm;E2BR$ `  
VyWYfPK  
17:10:22 MSG:ucid 79 TCP connected from IP:140.205.225.193! I f3{E  
X 45x~8f  
j/H>0^  
17:10:22 MSG:ucid 79:POST /j_acegi_security_check HTTP/1.1 *:\:5*SY  
(!*Xhz,(-  
d&|z=%9xl  
17:10:22 MSG:ucid 79 disconnected! heL$2dZ5H  
s:+HRJD|  
2W3NL|P  
17:10:22 MSG:ucid 59 disconnected! U!&_mD# c  
M3Khc#5S(  
Z5G]p4  
17:10:22 MSG:ucid 80 TCP connected from IP:140.205.225.193! ?P""KVp o  
AH2 _#\  
A*8m8Sh$  
17:10:22 MSG:ucid 80:POST /j_acegi_security_check HTTP/1.1 +yf(Rs)!  
?a5h iN0  
,3Wb4so  
17:10:22 MSG:ucid 80 disconnected! jR{-  
`$s)X$W?  
 hv+|s(  
17:10:23 MSG:ucid 81 TCP connected from IP:140.205.225.193! D##+)`dK  
Y5dD|]F|  
l0gY~T/#3  
17:10:23 MSG:ucid 81:POST /j_acegi_security_check HTTP/1.1 |K L')&"  
%#~((m1  
q#P$'7"  
17:10:23 MSG:ucid 81 disconnected! *cbeyB{E  
`|$'g^eCL  
CRH{E}>  
17:10:23 MSG:ucid 82 TCP connected from IP:140.205.225.193! !FTNmyM~F  
v" }WP34  
d/3J' (cq  
17:10:23 MSG:ucid 82:POST /j_acegi_security_check HTTP/1.1 7vn%kW=$  
2w+U$6e C  
V=pMq?Nr  
17:10:23 MSG:ucid 82 disconnected! %$@1FlqX;  
]' Y|N l  
\(I0wEQo$  
17:10:24 MSG:ucid 83 TCP connected from IP:140.205.225.193! 96d~~2p  
x^G'rF"nT  
5W/{h q8}}  
17:10:24 MSG:ucid 83:POST /j_acegi_security_check HTTP/1.1 QK)){ cK  
0ZMJ(C  
tz26=8  
17:10:24 MSG:ucid 83 disconnected! K]c4"JJ  
07V8;A<,  
 qve ./  
17:10:24 MSG:ucid 84 TCP connected from IP:140.205.225.193! !/`$AXO  
,~COZi;R.D  
nVE9^')8V  
17:10:24 MSG:ucid 84:POST /j_acegi_security_check HTTP/1.1 *U;'OWE[  
+TK3{5`!Ae  
8) N@qUV  
17:10:24 MSG:ucid 84 disconnected! * z'8j  
7p.>\YtoR}  
`ltN,?/  
17:10:25 MSG:ucid 85 TCP connected from IP:140.205.225.193! !gF9k8\Yr$  
W+Xz$j/u  
|?d#eQ9a  
17:10:25 MSG:ucid 85:POST /j_acegi_security_check HTTP/1.1 $= B8qZ+  
9i5tVOhE  
TX}T|ri  
17:10:25 MSG:ucid 85 disconnected! W3r?7!~  
oRM)% N#  
7Vu?  
17:10:25 MSG:ucid 86 TCP connected from IP:140.205.225.193! &gtG~mp<L  
eSEq{ ?>  
]0c+/ \b&  
17:10:25 MSG:ucid 86:POST /j_acegi_security_check HTTP/1.1 iDoDwq!l_  
r@U3sO#N  
BHA923p?  
17:10:25 MSG:ucid 86 disconnected! p8}(kHUp(  
Aw5pd7qKL  
vAb^]d   
17:10:26 MSG:ucid 87 TCP connected from IP:140.205.225.193! 0v)bA}k  
DC+b=IOz  
|TsE-t*E}  
17:10:26 MSG:ucid 87:POST /j_acegi_security_check HTTP/1.1 ^Hrn  ]  
T!RT<&  
izgp*M,  
17:10:26 MSG:ucid 87 disconnected! 6E ~g#(8  
mYxyWB  
jN31hDg<z  
17:10:27 MSG:ucid 88 TCP connected from IP:140.205.225.193! NGC,lv  
2I/xJ+  
\OILWQ[/  
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 /./"x~@  
=(v^5  
.Jx9bIw  
17:10:37 MSG:ucid 88 disconnected! n DS}^Ba  
Q=mI 9  
fq )vK  
17:10:42 MSG:ucid 89 TCP connected from IP:140.205.225.193! 7hP<f}xL  
(8$k4`T>  
K5Q43 e1  
17:10:42 MSG:ucid 89:GET /pmd/index.php HTTP/1.1 Tm}rH]F&  
qfY5Ww$8  
9,uhf b^]  
17:10:52 MSG:ucid 89 disconnected! o?L'Pg  
5|3e&  
6!x&LoM  
17:10:57 MSG:ucid 90 TCP connected from IP:140.205.225.193! {]_uMg#!  
l^GP3S  
q6Rr.A  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 ~h}Fi  
%^sTU4D5  
qm/Q65>E  
17:11:07 MSG:ucid 90 disconnected! pl@O N"=[  
)?+$x[f!*  
*eI)Z=8  
17:11:12 MSG:ucid 91 TCP connected from IP:140.205.225.193! {3;AwhN0H  
We0.3aG  
ojYbR<jn9  
17:11:12 MSG:ucid 91:GET /phpMyAdmin/index.php HTTP/1.1 Vk< LJ S  
B9p?8.[  
SJD@&m%?[  
17:11:22 MSG:ucid 91 disconnected! >U F  
X%yO5c\l2  
V5+SWXZ  
17:11:27 MSG:ucid 92 TCP connected from IP:140.205.225.193! hxce\OuU0h  
?X@fKAj  
;iDPn2?6?x  
17:11:27 MSG:ucid 92:GET /pma/index.php HTTP/1.1 a]Lp?  
YK|bXSA[  
}VDqj}is  
17:11:37 MSG:ucid 92 disconnected! s4&^D<  
&-(463  
Gt9&)/#  
17:11:42 MSG:ucid 93 TCP connected from IP:140.205.225.193! o7IxJCL=Q  
U,nEbKJgk  
Y*mbjyt[?X  
17:11:42 MSG:ucid 93:GET /pmd/index.php HTTP/1.1 ,{\Bze1fn  
f~ }H  
<uj 8lctmP  
17:11:52 MSG:ucid 93 disconnected! ~]ZpA-*@Ut  
% ,+leKs  
Q:J^"  
17:12:05 MSG:ucid 94 TCP connected from IP:140.205.225.193!  }fp-5  
NcY608C  
Df3rV'/~  
17:12:08 MSG:ucid 94 disconnected! @&[T _l  
cQ9q;r`%  
q^6+!&"  
17:14:33 MSG:httpsrv stop success!
[ 此帖被jiangyong在2017-05-19 17:44重新编辑 ]
级别: 小白
发帖
27
云币
31
只看该作者 沙发  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
基本就是这些; -j&Tc` j_  
GET / HTTP/1.1 Z{H5oUk  
GET /clusters.jsf HTTP/1.1 cHa]xmy%r'  
GET /jenkins/ HTTP/1.1 %Ts PyiYl  
GET /zabbix/ HTTP/1.1 Oh4AsOj@  
GET /solr/ HTTP/1.1 / Wf^hA  
GET /j_acegi_security_check HTTP/1.1 +*_5tWAc  
POST /j_acegi_security_check HTTP/1.1 @u1zB:  
Q);n<Z:X~  
GET不到j_acegi_security_check 就不断的POST,程序根本就是不支持POST命令。
级别: 小白
发帖
27
云币
31
只看该作者 板凳  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 ?Mee 6  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 xz:J  
vp.ZK[/`  
GET这些又是啥子意思呢?
级别: 分析狮
发帖
1625
云币
1772
只看该作者 地板  发表于: 05-20
云盾安全扫描,避免爆.破
发表主题 回复主题
« 返回列表上一主题下一主题

限100 字节
如果您在写长篇帖子又不马上发表,建议存为草稿
 
验证问题: 阿里云官网域名是什么? 正确答案:www.aliyun.com
上一个 下一个