阿里云
发表主题 回复主题
  • 260阅读
  • 3回复

[求助]把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。

级别: 小白
发帖
27
云币
31
己写了一个简易的http协议升级wesocket协议,绑定到8080端口,又不是标准的http协议80端口,为何阿里要用http协议来扫描8080端口。下面是记录的日志(只开了10分钟): N}DL(-SQ3  
{yS;NU`2  
7E\g &R.  
17:01:39 MSG:ucid 1 TCP connected from IP:120.132.3.151! !b63ik15O~  
$ser+Jt=  
xCq'[9oU  
17:01:39 MSG:ucid 2 TCP connected from IP:120.132.3.151! M*(H)i;s:w  
K"w%n[u)  
[,b)YjO~Xd  
17:01:39 MSG:ucid 3 TCP connected from IP:120.132.3.151! |z*>ixK  
j8a[ (  
#w|5 jN?  
17:01:39 MSG:ucid 3:GET http://www.qq.com/404/search_children.js HTTP/1.1 5gshKmt_  
(;ADW+.`J  
8k H<$9  
17:01:39 MSG:ucid 3 disconnected! jkt 6/H  
]2$x| #Gg}  
3AeH7g4<  
17:01:44 MSG:ucid 1 disconnected! d.AC%&W  
9!#EwPD$#  
8UM0vNk  
17:01:44 MSG:ucid 2 disconnected! oY.\)eJ~>  
Y.-S=Y   
%b?uW] j:  
17:08:08 MSG:ucid 4 TCP connected from IP:140.205.225.193! ?1w"IjUS  
x7$ax79ly  
6bL~6-h%)  
17:08:08 MSG:ucid 4:GET / HTTP/1.1 !_x*m@/  
s)w9%  
T 6HU*(  
17:08:08 MSG:ucid 4 disconnected! (Ilsk{aB;A  
OZOb1D  
u"FjwF?  
17:08:14 MSG:ucid 5 TCP connected from IP:140.205.225.193! J?D\$u:  
1exfCm  
2w4MJ,Uw  
17:08:14 MSG:ucid 5:GET / HTTP/1.1 vr4S9`,  
fj+O'X  
[cpNiw4e  
17:08:14 MSG:ucid 5 disconnected! ^73=7PZ  
KlO(o#&N  
( 3;`bvYH"  
17:08:34 MSG:ucid 6 TCP connected from IP:140.205.225.193! I%xn,u  
C*rd;+1A  
Pfan7fq+  
17:08:34 MSG:ucid 6:GET / HTTP/1.1 Z %EQt  
x+:zq<0|  
}4h0bI  
17:08:34 MSG:ucid 6 disconnected! HcO5?{2  
h=[-Er'B  
9p*-?kPb  
17:08:38 MSG:ucid 7 TCP connected from IP:140.205.225.193! _}ele+  
]o*$h$?s  
.bfST.OA  
17:08:38 MSG:ucid 7:GET /clusters.jsf HTTP/1.1 b:Dg}  
Q52 bh'cuU  
Fu##'#  
17:08:38 MSG:ucid 7 disconnected! s=U\_koyH  
j_c+.iET  
2sun=3qb  
17:09:16 MSG:ucid 8 TCP connected from IP:140.205.225.193! la`"$f  
OG}KqG!n  
kf K[u/<i  
17:09:16 MSG:ucid 8:GET / HTTP/1.1 QgZJ`G--  
T#r=<YH[C  
)_Iz>)  
17:09:16 MSG:ucid 8 disconnected! EL +,jrU~  
. s-5N\  
+7Rt{C,  
17:09:17 MSG:ucid 9 TCP connected from IP:140.205.225.193! 2@ *<9-9  
%omu  
!ew6 n I  
17:09:17 MSG:ucid 9:GET /jenkins/ HTTP/1.1 hXTYTbTX  
eI?HwP{m  
5"uNj<.V  
17:09:17 MSG:ucid 9 disconnected! 07Y_^d  
//tT8HX  
9C=~1>S  
17:09:18 MSG:ucid 10 TCP connected from IP:140.205.225.193! e# <4/FR  
q|Fjm]AF  
`GS cRhbh  
17:09:18 MSG:ucid 10:GET /zabbix/ HTTP/1.1 SdSgn|S  
n{$}#NdV  
R` 44'y|  
17:09:18 MSG:ucid 10 disconnected! 7?,7TR2Ny  
~f .y:Sbb  
_hWuAJ9Qy  
17:09:18 MSG:ucid 11 TCP connected from IP:140.205.225.193! %rw}u"3T  
@o60 c  
"&Gw1.p  
17:09:18 MSG:ucid 11:GET / HTTP/1.1 /Bh>  
OelU D/[$  
G~S))p  
17:09:19 MSG:ucid 11 disconnected! i`R(7Z  
o:H'r7N  
}'v{dK  
17:09:20 MSG:ucid 12 TCP connected from IP:140.205.225.193! t@6w$5:}  
X:U=MWc>  
}'PG!+=I  
17:09:20 MSG:ucid 12:GET / HTTP/1.1 & \JLTw  
J}:&eS  
lQh~Q<[ge  
17:09:20 MSG:ucid 12 disconnected! ^u3*hl}YKy  
Qg[heND  
' 4,y  
17:09:20 MSG:ucid 13 TCP connected from IP:140.205.225.193! bB y'v/  
eU`;L [  
' J2ewW5  
17:09:20 MSG:ucid 13:GET /solr/ HTTP/1.1 WUzS lZq  
KuIkul9^%  
0 4P.p6  
17:09:20 MSG:ucid 13 disconnected! [+y &HNf  
tsck|;v  
" 98/HzR  
17:09:50 MSG:ucid 14 TCP connected from IP:140.205.225.193! J 0&zb'1  
"v@);\-V  
1]"D%U=  
17:09:50 MSG:ucid 14:GET /j_acegi_security_check HTTP/1.1  o1 jk=  
n/xXQ7y  
qi( &8in  
17:09:50 MSG:ucid 14 disconnected! 4s[`yV  
zB;'_[8M  
4 U3C~J  
17:09:50 MSG:ucid 15 TCP connected from IP:140.205.225.193! C_6GOpl  
nUiS<D2  
O 5g}2  
17:09:50 MSG:ucid 15:POST /j_acegi_security_check HTTP/1.1 -FQC9~rR;g  
W/b"a?wE{  
s.|!Ti!]  
17:09:50 MSG:ucid 15 disconnected! r3n=<l!Jr  
xylpiSJ  
@~JB\j9  
17:09:51 MSG:ucid 16 TCP connected from IP:140.205.225.193! ;gZwQ6)i  
{CW1t5$*  
>.a+:   
17:09:51 MSG:ucid 16:POST /j_acegi_security_check HTTP/1.1 H|grbTv,  
lF0K=L  
:&xz5c`"04  
17:09:51 MSG:ucid 16 disconnected! 1_N~1Ik  
pw0Px  
j9{O0[v  
17:09:51 MSG:ucid 17 TCP connected from IP:140.205.225.193! ;n% ]*v  
RY>)eGJ  
\pjRv  
17:09:51 MSG:ucid 17:POST /j_acegi_security_check HTTP/1.1 r^?)F?n!  
L~@ma(TV{K  
SQ1M4:hP  
17:09:51 MSG:ucid 17 disconnected! QH@Q\ @,  
X=rc3~}f  
`,F&y{ A  
17:09:52 MSG:ucid 18 TCP connected from IP:140.205.225.193! BNAguAxWo  
tQNk=}VR7r  
jxRF"GD  
17:09:52 MSG:ucid 18:POST /j_acegi_security_check HTTP/1.1 $=e&q  
]_^"|RJ  
[@,OG-"&  
17:09:52 MSG:ucid 18 disconnected! r1[E{Tpz  
,pQ'w7  
r;&]?9)W0  
17:09:52 MSG:ucid 19 TCP connected from IP:140.205.225.193! c!'A)JD@  
Y9IJ   
m#5|J@]  
17:09:52 MSG:ucid 19:POST /j_acegi_security_check HTTP/1.1 w Mlf3Uz  
S5:"_U  
p9FA_(`^  
17:09:52 MSG:ucid 19 disconnected! `^ieT#(O  
c,#~L7  
KKx&UKjV  
17:09:53 MSG:ucid 20 TCP connected from IP:140.205.225.193! %Y)PH-z  
O:oU`vE  
w0a+8gexi  
17:09:53 MSG:ucid 20:POST /j_acegi_security_check HTTP/1.1 LY@1@O2@  
d-6sC@PB  
..P=D <'f  
17:09:53 MSG:ucid 20 disconnected! >,w\lf9  
A%NK0j$;}  
/t$+Af,}  
17:09:53 MSG:ucid 21 TCP connected from IP:140.205.225.193! w%i+>\tO  
_Ewy^;S%L  
! /|0:QQi  
17:09:53 MSG:ucid 21:POST /j_acegi_security_check HTTP/1.1 X7XCZSh#A  
mJ6t.%'d  
M-&^   
17:09:53 MSG:ucid 21 disconnected! )[y!m9Vn  
$4$?M[  
CO:m]oj  
17:09:54 MSG:ucid 22 TCP connected from IP:140.205.225.193! )E[ Q  
Mv7w5vTl  
DU*g~{8T$  
17:09:54 MSG:ucid 22:POST /j_acegi_security_check HTTP/1.1 OUBgBr   
M/8#&RycQ  
d!}jdt5%  
17:09:54 MSG:ucid 22 disconnected! MQ9M%>  
+s+PnZ%0V  
QN2*]+/h  
17:09:54 MSG:ucid 23 TCP connected from IP:140.205.225.193! Sg_-OX@f  
q^jqLT&w  
8M3p\}O  
17:09:54 MSG:ucid 23:POST /j_acegi_security_check HTTP/1.1 ;4S [ba1/  
z/P^-N>  
43}&w.AS  
17:09:54 MSG:ucid 23 disconnected! 4Rrw8Bw  
r$3~bS$]  
xy z\;3  
17:09:55 MSG:ucid 24 TCP connected from IP:140.205.225.193! R uFu,H-  
|j5A U  
$:-= >  
17:09:55 MSG:ucid 24:POST /j_acegi_security_check HTTP/1.1 psyH?&T  
P5 <85t  
*2m&?,nJ  
17:09:55 MSG:ucid 24 disconnected! d=+Lv<  
Z#cU#)`y1  
\'^Z_6{w  
17:09:55 MSG:ucid 25 TCP connected from IP:140.205.225.193! n nnA,  
1^H<+0  
{</$ObK  
17:09:55 MSG:ucid 25:POST /j_acegi_security_check HTTP/1.1 Fp|rMq  
KxTYc  
ygy#^  
17:09:55 MSG:ucid 25 disconnected! y3o4%K8  
t+)GB=C  
EV7+u0uN&Q  
17:09:56 MSG:ucid 26 TCP connected from IP:140.205.225.193! $d??(   
/ jL{JF>I  
j n&9<"W  
17:09:56 MSG:ucid 26:POST /j_acegi_security_check HTTP/1.1 JpHsQ8<  
v,.n/@s|X  
7!yF5 +_d  
17:09:56 MSG:ucid 26 disconnected! ,E8>:-boL  
FLnAN;  
kA :;c}p  
17:09:56 MSG:ucid 27 TCP connected from IP:140.205.225.193! Exs _LN  
[Oy2&C  
R^O)fL0_  
17:09:56 MSG:ucid 27:POST /j_acegi_security_check HTTP/1.1 0@/E% T1c"  
u(G;57ms  
9kg>)ty@  
17:09:56 MSG:ucid 27 disconnected! E,?aBRxy  
?bYQZJ>&  
c"&!=@  
17:09:57 MSG:ucid 28 TCP connected from IP:140.205.225.193! Hr,gV2n  
,'{B+CHoS  
8}`8lOE7  
17:09:57 MSG:ucid 28:POST /j_acegi_security_check HTTP/1.1 F1[ [fH  
\C\y' H5  
Mw7UU1 ei  
17:09:57 MSG:ucid 28 disconnected! EsxTBg  
j\L$dPZ  
m3!MHe~t  
17:09:57 MSG:ucid 29 TCP connected from IP:140.205.225.193! 5Fm? ,^  
eS%6 h U b  
7XC}C+  
17:09:57 MSG:ucid 29:GET /phpmyadmin/index.php HTTP/1.1 x3F L/^S  
_q4dgi z  
b020U>)v  
17:09:57 MSG:ucid 30 TCP connected from IP:140.205.225.193! kT=|tQ@  
_~&v s<  
>oYwzK0&  
17:09:57 MSG:ucid 30:POST /j_acegi_security_check HTTP/1.1 ,r,;2,;6nd  
:H:}t>X6Vo  
JM9Q]#'t  
17:09:57 MSG:ucid 30 disconnected! c@{^3V##T  
DQXx}%Px  
}nERQq&A  
17:09:58 MSG:ucid 31 TCP connected from IP:140.205.225.193! @9 tv N}  
%pKs- n`  
c`=h K*  
17:09:58 MSG:ucid 31:POST /j_acegi_security_check HTTP/1.1 J-?(sjIX  
@  MoMU  
J, U~ .c  
17:09:58 MSG:ucid 31 disconnected! 9e*poG  
ZlXs7 &_  
pl/$@K?L  
17:09:58 MSG:ucid 32 TCP connected from IP:140.205.225.193! KAEpFobYo  
3ZZI1_j  
#Ih(2T i  
17:09:58 MSG:ucid 32:POST /j_acegi_security_check HTTP/1.1 9jBr868  
E&v-(0  
Mi-9sW  
17:09:58 MSG:ucid 32 disconnected! skArocs  
\dbtd hT;Z  
S(xA}0]  
17:09:59 MSG:ucid 33 TCP connected from IP:140.205.225.193! CBHWMetJ*  
Um&@ 0C+L  
~qxc!k!w4  
17:09:59 MSG:ucid 33:POST /j_acegi_security_check HTTP/1.1 ZXkAw sr  
CtxK{:  
9LRY  
17:09:59 MSG:ucid 33 disconnected! N.rB-  
>0$5H]1u  
$nN$"  
17:09:59 MSG:ucid 34 TCP connected from IP:140.205.225.193! .=D6<4#t  
SS-   
O;tn5  
17:09:59 MSG:ucid 34:POST /j_acegi_security_check HTTP/1.1 Vngi8%YWp  
93,ExgFt  
.!! yj,bQz  
17:09:59 MSG:ucid 34 disconnected! :W55JD'  
fW`F^G1R  
IS~oyFS  
17:10:00 MSG:ucid 35 TCP connected from IP:140.205.225.193! ~a Rq\fx{  
umYdr'p!v  
ujBADDwOg)  
17:10:00 MSG:ucid 35:POST /j_acegi_security_check HTTP/1.1 2Ev,dWV  
M,P_xkLp  
P*Nl3?T  
17:10:00 MSG:ucid 35 disconnected! 1OKJE(T  
VB%xV   
7t QiKrhp  
17:10:00 MSG:ucid 36 TCP connected from IP:140.205.225.193! =>U~ligu  
ah.Kb(d:  
*@Z'{V\  
17:10:00 MSG:ucid 36:POST /j_acegi_security_check HTTP/1.1 {zcjTJ=Zt8  
bBf+z7iyc  
4+0Zj+ q";  
17:10:00 MSG:ucid 36 disconnected! 6 9Cxh  
0ni5:tYy  
1*"Uc!7.%  
17:10:01 MSG:ucid 37 TCP connected from IP:140.205.225.193! 0J" 3RTt  
jdzV&  
,$Mw/fA  
17:10:01 MSG:ucid 37:POST /j_acegi_security_check HTTP/1.1 okW3V}/x/z  
-llujB%;,e  
oT'XcMn  
17:10:01 MSG:ucid 37 disconnected! e-WaK0Ep  
D'X'h}+2  
(.cT<(TB  
17:10:01 MSG:ucid 38 TCP connected from IP:140.205.225.193! DRnXo-Aaj  
Zo` ^pQS  
=[$*PTe  
17:10:01 MSG:ucid 38:POST /j_acegi_security_check HTTP/1.1 />?d 2?  
Ny#%7%(  
<5.{+!BM  
17:10:01 MSG:ucid 38 disconnected! _i&\G}mrC  
x8H)m+AW  
N\u-8nE5  
17:10:02 MSG:ucid 39 TCP connected from IP:140.205.225.193! )\e_I\-  
>2rFURcD  
gm8H)y,  
17:10:02 MSG:ucid 39:POST /j_acegi_security_check HTTP/1.1 LZeR .8XM>  
` :2C9,Xu  
2a G<^3  
17:10:02 MSG:ucid 39 disconnected! ZE9*i}r  
|(/"IS]  
lIf Our  
17:10:02 MSG:ucid 40 TCP connected from IP:140.205.225.193! k;)L-ge9  
 i J\#su  
4]cOTXk9C  
17:10:02 MSG:ucid 40:POST /j_acegi_security_check HTTP/1.1 YC$pT  
au8) G_A  
ELm#  
17:10:02 MSG:ucid 40 disconnected! ev; &$Hc  
NzEuiI}  
71~V*  
17:10:03 MSG:ucid 41 TCP connected from IP:140.205.225.193! :( `Q4D~l  
GVg0)}  
'HC4Q{b`  
17:10:03 MSG:ucid 41:POST /j_acegi_security_check HTTP/1.1 bZ389dSn  
i^n&K:6  
q3;HfZ  
17:10:03 MSG:ucid 41 disconnected! ,0~'#x>  
|HL1.;1  
R4o_zwWgPw  
17:10:03 MSG:ucid 42 TCP connected from IP:140.205.225.193! 3A+d8fwi  
\Wo,^qR  
j3FDGDrg  
17:10:03 MSG:ucid 42:POST /j_acegi_security_check HTTP/1.1 eX=W+&lj  
rUj]6j=e  
.rS0zU  
17:10:03 MSG:ucid 42 disconnected! SnVnC09y  
C9~CP8  
t]Oxo`h=  
17:10:04 MSG:ucid 43 TCP connected from IP:140.205.225.193! N[AX29  
J3K!@m_\  
YpAjZQZ,  
17:10:04 MSG:ucid 43:POST /j_acegi_security_check HTTP/1.1 #t;@x_2yD\  
[1N*mY;  
GU_R6Wt+  
17:10:04 MSG:ucid 43 disconnected! 7^ER?@:W  
%POoyH@D}  
R7vO,kZ6Q  
17:10:04 MSG:ucid 44 TCP connected from IP:140.205.225.193! Xbfn@7m  
ab6KK$s  
;Lz96R@}  
17:10:04 MSG:ucid 44:POST /j_acegi_security_check HTTP/1.1  aj1Zi3h  
 Qq>M}  
1{_;`V  
17:10:04 MSG:ucid 44 disconnected! iEnDS@7  
,zO!`|I  
_},u[+  
17:10:05 MSG:ucid 45 TCP connected from IP:140.205.225.193! >/GVlXA'  
'`^`NI`  
/dj r_T  
17:10:05 MSG:ucid 45:POST /j_acegi_security_check HTTP/1.1 S}mqK|!  
g"^<LX-  
O6 bB CF;  
17:10:05 MSG:ucid 45 disconnected! Ar,B7-F!  
@.@O#  
(w `9*1NO  
17:10:05 MSG:ucid 46 TCP connected from IP:140.205.225.193! C,HKao\  
dJ#mk5= "  
5Ay\s:hb[u  
17:10:05 MSG:ucid 46:POST /j_acegi_security_check HTTP/1.1 *;5P65:u$>  
@FU9!  
rzsAnLxo  
17:10:05 MSG:ucid 46 disconnected! unY+/p $  
N D`?T &PK  
"Y-_83  
17:10:06 MSG:ucid 47 TCP connected from IP:140.205.225.193! Wo+fMn(O  
A 0~uv4MC  
qp;eBa  
17:10:06 MSG:ucid 47:POST /j_acegi_security_check HTTP/1.1 \W:~;GMeD  
rlV:% k  
Hwiw:lPq`E  
17:10:06 MSG:ucid 47 disconnected! mqUn3F3  
Okxuhzn>"  
xL&M8:  
17:10:06 MSG:ucid 48 TCP connected from IP:140.205.225.193! \k&2nYVHf  
qD!qSM  
*ETSx{)8  
17:10:06 MSG:ucid 48:POST /j_acegi_security_check HTTP/1.1 H;D 5)eJ90  
^6g^ Q*"  
+ xYU$e6Z  
17:10:06 MSG:ucid 48 disconnected! 9eR4?^(3!  
,v\^efc:%  
x#)CH}J  
17:10:07 MSG:ucid 49 TCP connected from IP:140.205.225.193! 7H=V|Btnc  
I.dS-)Y  
05SK$ Y<<  
17:10:07 MSG:ucid 49:POST /j_acegi_security_check HTTP/1.1 +V Oczl=  
j{&*]QTN  
e)BU6m%  
17:10:07 MSG:ucid 49 disconnected! 6>Dm cG:.  
 4>R)2g  
nY M2Vxi0+  
17:10:07 MSG:ucid 29 disconnected! 2pQ29  
3%~c\naD?O  
dQljG.PiK  
17:10:07 MSG:ucid 50 TCP connected from IP:140.205.225.193! 15J t @{<r  
0&Z+P?Wb4  
Ht4A   
17:10:07 MSG:ucid 50:POST /j_acegi_security_check HTTP/1.1 X+7@8)1(  
+d!"Zy2|B  
F<0GX!p4u  
17:10:07 MSG:ucid 50 disconnected! /0 2-0mNv  
wGLSei-s  
L S%;ZKJ  
17:10:08 MSG:ucid 51 TCP connected from IP:140.205.225.193! 8[rZRc  
RLNto5?  
wX+KW0|>  
17:10:08 MSG:ucid 51:GET /j_acegi_security_check HTTP/1.1 H: rrY  
~5:-;ZbZ  
$N/"c$50,  
17:10:08 MSG:ucid 51 disconnected! ,V &RpKek  
6Eu"T9 (  
(@i2a  
17:10:09 MSG:ucid 52 TCP connected from IP:140.205.225.193! VMl)_M:'  
|R3A$r#-  
hQ_g OI  
17:10:09 MSG:ucid 52:POST /j_acegi_security_check HTTP/1.1 !SAR/sdXf  
A(1d q  
|Ye%HpTTv  
17:10:09 MSG:ucid 52 disconnected! 9{&oVt~Y$  
m\eYm;R Vj  
el3lR((H  
17:10:09 MSG:ucid 53 TCP connected from IP:140.205.225.193! chszP{-@X  
s)5W:`MH?  
+ 0 |d2_]E  
17:10:09 MSG:ucid 53:POST /j_acegi_security_check HTTP/1.1 ?TMrnR/d  
#xNXCBl]O  
ss'`[QhR2  
17:10:09 MSG:ucid 53 disconnected! }0 b[/ZwQ  
ZU K'z  
(aX6jdvo  
17:10:10 MSG:ucid 54 TCP connected from IP:140.205.225.193! 0u=FlQ }h  
4n}^1eQ9  
Zd <8c^@  
17:10:10 MSG:ucid 54:POST /j_acegi_security_check HTTP/1.1 w6G<&1iH  
57rH`UFXH  
o}6d[G>  
17:10:10 MSG:ucid 54 disconnected! H-'~c \)  
3}V -'!  
+kZW:t!-  
17:10:10 MSG:ucid 55 TCP connected from IP:140.205.225.193! ![hVTZ,hyZ  
HWxwG'EEY,  
+/Qgl  
17:10:10 MSG:ucid 55:POST /j_acegi_security_check HTTP/1.1 Yxd&hr  
K-,8~8[  
m+'vrxTY  
17:10:10 MSG:ucid 55 disconnected! pqnZ:'V  
g!.k>  
*Rj(~Q/t  
17:10:11 MSG:ucid 56 TCP connected from IP:140.205.225.193! E'wJ+X9 +  
(|_N2R!  
uwhb-.w  
17:10:11 MSG:ucid 56:POST /j_acegi_security_check HTTP/1.1 iES?}K/q  
18];fC  
2m0laJ3p9  
17:10:11 MSG:ucid 56 disconnected! 9Bw.Ih[Z  
#0gwN2Nv"L  
?R8wmE[w  
17:10:11 MSG:ucid 57 TCP connected from IP:140.205.225.193! NZ=`iA8)X  
bj`mQMC  
g}Esj"7  
17:10:11 MSG:ucid 57:POST /j_acegi_security_check HTTP/1.1 |A%Jx__  
3r]N\c  
+`s%-}-r  
17:10:11 MSG:ucid 57 disconnected! r\."=l  
;.'\8!j  
y`Nprwb  
17:10:12 MSG:ucid 58 TCP connected from IP:140.205.225.193! 5"WI^"6b:  
]H$Trf:L  
L}M%z9K` h  
17:10:12 MSG:ucid 58:POST /j_acegi_security_check HTTP/1.1 ZR8%h<  
w =2; QJ<  
5 !Ho[  
17:10:12 MSG:ucid 58 disconnected! D_)N!,i  
r"&uW !~0  
R}E$SmFg  
17:10:12 MSG:ucid 59 TCP connected from IP:140.205.225.193! =_=0l+\}  
!~_6S*~  
Min {&?a  
17:10:12 MSG:ucid 59:GET /phpMyAdmin/index.php HTTP/1.1 w/, A@fLL  
%$6?em_  
EL^j}P  
17:10:12 MSG:ucid 60 TCP connected from IP:140.205.225.193! oH"VrS 6  
S|  
@>q4hYF  
17:10:12 MSG:ucid 60:POST /j_acegi_security_check HTTP/1.1 AK//]   
ZYLPk<<  
rKkFflOVO  
17:10:12 MSG:ucid 60 disconnected! XES$V15  
?Ll1B3f  
d04fj/B  
17:10:13 MSG:ucid 61 TCP connected from IP:140.205.225.193! )CoJ9PO7  
#}+_Hy  
0 } |21YED  
17:10:13 MSG:ucid 61:POST /j_acegi_security_check HTTP/1.1 4&<zkAMR  
V(=3K"j  
Bp/ k{7  
17:10:13 MSG:ucid 61 disconnected! p?' F$Wz  
?OBB)hj  
F#Bi*YY  
17:10:13 MSG:ucid 62 TCP connected from IP:140.205.225.193! rU_FRk  
q@d6P~[-gj  
ZW ZKyJQ  
17:10:13 MSG:ucid 62:POST /j_acegi_security_check HTTP/1.1 :o_6  
ka<rlh<h  
$*;ke5Dm4  
17:10:13 MSG:ucid 62 disconnected! $`txU5#vs  
9m}c2:p  
!;B^\ 8{  
17:10:14 MSG:ucid 63 TCP connected from IP:140.205.225.193! G;;iGN  
=Cp}iM  
Am)XbN')1  
17:10:14 MSG:ucid 63:POST /j_acegi_security_check HTTP/1.1 ? q hme   
&+7G|4!y  
2w67 >w\  
17:10:14 MSG:ucid 63 disconnected! $jNp-5+Q;  
&g5+ |g (  
@(s"5i.`)  
17:10:14 MSG:ucid 64 TCP connected from IP:140.205.225.193! UU 2 =W  
H8?Kgaj~vf  
y3pr(w9A  
17:10:14 MSG:ucid 64:POST /j_acegi_security_check HTTP/1.1 a%)-iL X8&  
*8j2iu-|  
 XV*uu "F  
17:10:14 MSG:ucid 64 disconnected! mLL?n)   
1U< g  
<_N<L\  
17:10:15 MSG:ucid 65 TCP connected from IP:140.205.225.193! 5v`[c+@F  
Q`kJ3b   
mhDC1lXF  
17:10:15 MSG:ucid 65:POST /j_acegi_security_check HTTP/1.1 t) :'XGk@  
zY=eeG+4s  
^I CSs]}1  
17:10:15 MSG:ucid 65 disconnected! x<fF1];  
QU;bDNq,c  
w 4fz!l]  
17:10:15 MSG:ucid 66 TCP connected from IP:140.205.225.193! f~0CpB*X  
(/a#1Pd&  
j LS<S_`  
17:10:15 MSG:ucid 66:POST /j_acegi_security_check HTTP/1.1 u9zEhfg8  
p"UdD  
\QvoL  
17:10:15 MSG:ucid 66 disconnected! \~!!h.xR  
rd:WF(]  
9-3, DxZ}  
17:10:16 MSG:ucid 67 TCP connected from IP:140.205.225.193! bQlvb  
("r\3Mvs  
e"D%eFkDW  
17:10:16 MSG:ucid 67:POST /j_acegi_security_check HTTP/1.1 p.^qB]%  
~9[O'  
|Fi{]9(G2  
17:10:16 MSG:ucid 67 disconnected! YstR T1  
|8q:sr_  
H-&T)  
17:10:16 MSG:ucid 68 TCP connected from IP:140.205.225.193! .mbqsb]&Y  
U #C@&2  
"P9(k>  
17:10:16 MSG:ucid 68:POST /j_acegi_security_check HTTP/1.1 C<Z{G%Qm  
xwF mY'o  
21$E.x 6  
17:10:16 MSG:ucid 68 disconnected! re~T,PPM  
|z7V1xF  
~ \]?5 nj  
17:10:17 MSG:ucid 69 TCP connected from IP:140.205.225.193! 8<)ZpB,7  
Kr5(fU  
bFIM07  
17:10:17 MSG:ucid 69:POST /j_acegi_security_check HTTP/1.1 Z%Fc -KVt  
w^"IR  
yAiO._U  
17:10:17 MSG:ucid 69 disconnected! ]9N&I/-  
E<l/o5<nC  
`Gj(>z*  
17:10:17 MSG:ucid 70 TCP connected from IP:140.205.225.193! g<N;31:c\  
'451H3LC0  
+CM>]Ze  
17:10:17 MSG:ucid 70:POST /j_acegi_security_check HTTP/1.1 ]OtnekkK$  
9=mc3m:Tb(  
FUarI5#fwF  
17:10:17 MSG:ucid 70 disconnected! /&c2O X|Z  
9Pb6Z}  
Cz)&R^  
17:10:18 MSG:ucid 71 TCP connected from IP:140.205.225.193! ZTibF'\5N  
]rv4O@||w  
Z5E; FGPb  
17:10:18 MSG:ucid 71:POST /j_acegi_security_check HTTP/1.1 &+n9T?+b  
#R>x]Nt}  
CLTkyS)C  
17:10:18 MSG:ucid 71 disconnected! ?ac4GA(  
d:k n%L6k_  
-@e2/6Oi  
17:10:18 MSG:ucid 72 TCP connected from IP:140.205.225.193! l n\qvD_  
0,nz*UDk  
H %c6I  
17:10:18 MSG:ucid 72:POST /j_acegi_security_check HTTP/1.1 n1JtY75#,/  
$&=xw _  
\ )=WA!  
17:10:18 MSG:ucid 72 disconnected! > 1(J  
3 3|t5Ia  
)q[P&f(h  
17:10:19 MSG:ucid 73 TCP connected from IP:140.205.225.193! <^\rv42'(2  
tEL9hZzI  
UrHndnqM  
17:10:19 MSG:ucid 73:POST /j_acegi_security_check HTTP/1.1 WFiX=@SS  
.07`nIs"  
VJ=>2'I  
17:10:19 MSG:ucid 73 disconnected! %rMCiz  
<(q(5jG  
v,S5C  
17:10:19 MSG:ucid 74 TCP connected from IP:140.205.225.193! `XhH{*Q"X  
yo=L1; H  
ZRG Cy5Rk  
17:10:19 MSG:ucid 74:POST /j_acegi_security_check HTTP/1.1 aknIrblS\  
P{-- R\  
J7* o%W*V  
17:10:19 MSG:ucid 74 disconnected! ~x^y5[5{  
Vw1>d+<~-)  
@^<odmM  
17:10:20 MSG:ucid 75 TCP connected from IP:140.205.225.193! %+H_V1F  
Z^ :_,aJ?  
N#K)Z5J)b  
17:10:20 MSG:ucid 75:POST /j_acegi_security_check HTTP/1.1 _6nAxm&x`%  
UPI- j#yc  
/@F'f@;  
17:10:20 MSG:ucid 75 disconnected! "esuLQC  
*O :JECKU  
M bWby'  
17:10:20 MSG:ucid 76 TCP connected from IP:140.205.225.193! (N}-]%#  
8f9wUPr  
q< XFw-Pv  
17:10:20 MSG:ucid 76:POST /j_acegi_security_check HTTP/1.1 o]q~sJVk6  
fAgeF$9@  
>$JE!.p%o  
17:10:20 MSG:ucid 76 disconnected! i%-yR DIX  
509T?\r  
=&z+7Pe[  
17:10:21 MSG:ucid 77 TCP connected from IP:140.205.225.193! WT'-.UX m  
~.: { Ik]  
5vyg-'  
17:10:21 MSG:ucid 77:POST /j_acegi_security_check HTTP/1.1 |9jK-F6   
pi?/]}:  
A0<g8pv  
17:10:21 MSG:ucid 77 disconnected! 9;+&}:IVS  
@Chl>s  
w a_{\v=  
17:10:21 MSG:ucid 78 TCP connected from IP:140.205.225.193! },8|9z#pyB  
ku5|cF*%  
vwT1bw.  
17:10:21 MSG:ucid 78:POST /j_acegi_security_check HTTP/1.1 ^ 8}P_  
sfX~X/  
R! M'  
17:10:21 MSG:ucid 78 disconnected! "du(BZw  
t`8Jz~G`  
$VmV>NZ  
17:10:22 MSG:ucid 79 TCP connected from IP:140.205.225.193! ,/?J!W@m  
@rYZ0`E9  
5nx*D"  
17:10:22 MSG:ucid 79:POST /j_acegi_security_check HTTP/1.1 y~+LzDV  
Z?+ )ox  
j\>&]0-Iq  
17:10:22 MSG:ucid 79 disconnected! Xex7Lr&  
dHY@V> D'-  
2H`r:x<Z-  
17:10:22 MSG:ucid 59 disconnected! TB>_#+:  
%$&eC  
=78y* `L  
17:10:22 MSG:ucid 80 TCP connected from IP:140.205.225.193! m~+.vk  
D+!T5)>(  
sccLP_#Z  
17:10:22 MSG:ucid 80:POST /j_acegi_security_check HTTP/1.1 Nf4@m|#  
< dE7+w  
rPB Ju0D"  
17:10:22 MSG:ucid 80 disconnected! %`$bQU  
0")_%  
570ja7C:  
17:10:23 MSG:ucid 81 TCP connected from IP:140.205.225.193! ikZYc ${  
OFo hyy(  
$D`Kz*/.  
17:10:23 MSG:ucid 81:POST /j_acegi_security_check HTTP/1.1 #sU>L=  
I]HYqI  
GNW$:=0u  
17:10:23 MSG:ucid 81 disconnected! "I=Lbh-`  
<RxxGD  
i{}m 8K)  
17:10:23 MSG:ucid 82 TCP connected from IP:140.205.225.193! CM~x1f*v  
c*owP  
."Pn[$'.  
17:10:23 MSG:ucid 82:POST /j_acegi_security_check HTTP/1.1 Y3|_&\ v6  
p+Yy"wH:h{  
^Cp;#|g,  
17:10:23 MSG:ucid 82 disconnected! zq5N@d F  
)l*3^kwL{U  
hAgrs[OFj  
17:10:24 MSG:ucid 83 TCP connected from IP:140.205.225.193! JiqhCt\  
Wu,=jL3?$A  
/?>W\bP<  
17:10:24 MSG:ucid 83:POST /j_acegi_security_check HTTP/1.1 -Nr*na^H9#  
W^W.* ?e`  
k(`>(w  
17:10:24 MSG:ucid 83 disconnected! s&%r?  
1< b~="  
G~zfPBN0D  
17:10:24 MSG:ucid 84 TCP connected from IP:140.205.225.193! ,*[N_[  
~- aUw}U  
)REegFN@  
17:10:24 MSG:ucid 84:POST /j_acegi_security_check HTTP/1.1 iQ;lvOja  
Ut%{pc 7^F  
;<MHl[jJD  
17:10:24 MSG:ucid 84 disconnected! -f'&JwE0=  
0W 1bZPM  
'K23oQwDB  
17:10:25 MSG:ucid 85 TCP connected from IP:140.205.225.193! FrRUAoF O  
5rtE/ {A  
HKC&grp  
17:10:25 MSG:ucid 85:POST /j_acegi_security_check HTTP/1.1 `/G9*tIR8g  
3#uc+$[  
(j%"iQD  
17:10:25 MSG:ucid 85 disconnected! G[d]t$f=  
p`"Ic2xPJ  
H.Z<T{y;  
17:10:25 MSG:ucid 86 TCP connected from IP:140.205.225.193! z  +c8G  
NwKj@Jos  
&j"_hFhv  
17:10:25 MSG:ucid 86:POST /j_acegi_security_check HTTP/1.1 ~A(^<  
$F/xv&t  
r0<zy_d'  
17:10:25 MSG:ucid 86 disconnected! !%D;H~mQ  
] < ;y_  
nbv}Q-C  
17:10:26 MSG:ucid 87 TCP connected from IP:140.205.225.193! #A~7rH%hi  
@6y)wA9Yx  
(2 P&@!|  
17:10:26 MSG:ucid 87:POST /j_acegi_security_check HTTP/1.1 a 4? c~bs  
MMQ\V(C  
y+' ,jM  
17:10:26 MSG:ucid 87 disconnected! c&g*nDuDj  
(Kw%fJT  
Gl4f:`  
17:10:27 MSG:ucid 88 TCP connected from IP:140.205.225.193! F~GIfJU  
BWkTQd<t  
h\6 t\_^\  
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 P(p|NRD@1  
+[V.yY/t|>  
"i%=QON`  
17:10:37 MSG:ucid 88 disconnected! q^}iXE~  
?{1& J9H  
c`UizZ  
17:10:42 MSG:ucid 89 TCP connected from IP:140.205.225.193! Hr(%y&0  
0>3Sn\gZ(  
5"L.C32  
17:10:42 MSG:ucid 89:GET /pmd/index.php HTTP/1.1 5QG?*Z~?7  
#a 4X*X.8c  
LKM;T-  
17:10:52 MSG:ucid 89 disconnected! !!)NER-dv  
|Syulus  
>%c>R'~h  
17:10:57 MSG:ucid 90 TCP connected from IP:140.205.225.193! 'Z6x\p  
nR,QqIFFw  
nCLEAe$W\=  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 x.q"FXu  
=<r1sqf  
D1wONss  
17:11:07 MSG:ucid 90 disconnected! 3 5p) e c  
TV?MB(mN  
~Vf A  
17:11:12 MSG:ucid 91 TCP connected from IP:140.205.225.193! OyIIJ!(  
vSwRj<|CF  
=F46v{la  
17:11:12 MSG:ucid 91:GET /phpMyAdmin/index.php HTTP/1.1 ,-SWrp`f  
Upz?x{>x  
ka*#O"}L8  
17:11:22 MSG:ucid 91 disconnected! && b;Wr  
]3L/8]:  
`ix&j8E22w  
17:11:27 MSG:ucid 92 TCP connected from IP:140.205.225.193! pL ,l  
vywpX^KPv  
j7J'd?l  
17:11:27 MSG:ucid 92:GET /pma/index.php HTTP/1.1 _>4)q=  
pz]! T'  
k\-h-0[|  
17:11:37 MSG:ucid 92 disconnected! -[[( Zx  
wJh/tb=$o  
tN z(s)  
17:11:42 MSG:ucid 93 TCP connected from IP:140.205.225.193! _IWLC{%V  
x7/";L>  
U+&Eps&NI  
17:11:42 MSG:ucid 93:GET /pmd/index.php HTTP/1.1 gmZ] E45  
-! ^D8^s  
z#2n+hwE  
17:11:52 MSG:ucid 93 disconnected! |mcc?*%t8  
~yJJ00%  
:TkMS8  
17:12:05 MSG:ucid 94 TCP connected from IP:140.205.225.193! L2OR<3*|Av  
5<YL^m{/L  
)W&{OMr  
17:12:08 MSG:ucid 94 disconnected! G=|~SYz  
<,D*m+BWn  
6"R'z#{OF  
17:14:33 MSG:httpsrv stop success!
[ 此帖被jiangyong在2017-05-19 17:44重新编辑 ]
级别: 小白
发帖
27
云币
31
只看该作者 沙发  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
基本就是这些; bkS"]q)>  
GET / HTTP/1.1 4u+0 )<  
GET /clusters.jsf HTTP/1.1 _ ,/~P)  
GET /jenkins/ HTTP/1.1 e5 }amrz  
GET /zabbix/ HTTP/1.1 SZ}=~yoD(  
GET /solr/ HTTP/1.1 u@CQ+pnf:(  
GET /j_acegi_security_check HTTP/1.1 !-%XrU8o3  
POST /j_acegi_security_check HTTP/1.1 *QV"o{V  
MpBdke$  
GET不到j_acegi_security_check 就不断的POST,程序根本就是不支持POST命令。
级别: 小白
发帖
27
云币
31
只看该作者 板凳  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 >7zC-3  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 oeB'{bG  
D}LM(s3li7  
GET这些又是啥子意思呢?
级别: 架构狮
发帖
1593
云币
1738
只看该作者 地板  发表于: 05-20
云盾安全扫描,避免爆.破
发表主题 回复主题
« 返回列表上一主题下一主题

限100 字节
如果您提交过一次失败了,可以用”恢复数据”来恢复帖子内容
 
验证问题: 阿里云官网域名是什么? 正确答案:www.aliyun.com
上一个 下一个