阿里云
服务器地域选择
发表主题 回复主题
  • 696阅读
  • 3回复

[求助]把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。

级别: 小白
发帖
27
云币
31
己写了一个简易的http协议升级wesocket协议,绑定到8080端口,又不是标准的http协议80端口,为何阿里要用http协议来扫描8080端口。下面是记录的日志(只开了10分钟): Q| _e=  
]; Z[V  
Ucqn 3&  
17:01:39 MSG:ucid 1 TCP connected from IP:120.132.3.151! Gzw9E.Hk  
cME|Lg(J$  
/73ANQ"  
17:01:39 MSG:ucid 2 TCP connected from IP:120.132.3.151! F[5sFk M7  
|EZ\+!8N:{  
(ptk!u6  
17:01:39 MSG:ucid 3 TCP connected from IP:120.132.3.151! {Q~HMe`,  
W&Xm_T[ Q  
4m"6$  
17:01:39 MSG:ucid 3:GET http://www.qq.com/404/search_children.js HTTP/1.1 1@<PcQBp  
!eP)"YWI3  
;^f ;<  
17:01:39 MSG:ucid 3 disconnected! (CR]96n  
kdW$>Jqb  
k/,7FDO?m  
17:01:44 MSG:ucid 1 disconnected! $i9</Es P  
g 5@P  
EC`=nGF  
17:01:44 MSG:ucid 2 disconnected! n]x%xnt  
VXP@)\!  
>`=9So_J  
17:08:08 MSG:ucid 4 TCP connected from IP:140.205.225.193! S3N+ 9*i K  
h]>7Dl]  
3k# h!Z  
17:08:08 MSG:ucid 4:GET / HTTP/1.1 4'# ?"I  
r0/aw  
h1Nd1h@-   
17:08:08 MSG:ucid 4 disconnected! N!%[.3o\K  
A/TCJ#>l  
bZlKy`Z  
17:08:14 MSG:ucid 5 TCP connected from IP:140.205.225.193! *nx$r[Mqj  
:y1,OR/k  
K};~A?ET,h  
17:08:14 MSG:ucid 5:GET / HTTP/1.1 l}_6 _g>6  
^ ^T xx  
c|s7 cG$+-  
17:08:14 MSG:ucid 5 disconnected! NiBly  
["WWaCcx  
&cZl2ynPi  
17:08:34 MSG:ucid 6 TCP connected from IP:140.205.225.193! 0BP Ubp(  
%\] x}IC  
S0w:R:q}L  
17:08:34 MSG:ucid 6:GET / HTTP/1.1 +} x\|O  
N oRPvFv  
jidRh}>a=  
17:08:34 MSG:ucid 6 disconnected! vLIaTr gz  
q,T4- E  
VQ8Q=!]  
17:08:38 MSG:ucid 7 TCP connected from IP:140.205.225.193! <.=-9O6  
\49s;\I]  
*~kHH  
17:08:38 MSG:ucid 7:GET /clusters.jsf HTTP/1.1 c2wgJH!g  
y' RQ_Gi  
.`jYrW-k  
17:08:38 MSG:ucid 7 disconnected! ]cM,m2^2  
'fPDODE  
IL{tm0$r  
17:09:16 MSG:ucid 8 TCP connected from IP:140.205.225.193! 6z2%/P-'  
W>(w&k]%B  
Ff1!+P,  
17:09:16 MSG:ucid 8:GET / HTTP/1.1 |4rqj 1*U  
Xi0fX$-,  
<>H^:iqn  
17:09:16 MSG:ucid 8 disconnected! 0i(c XB  
)]C(NTfxg  
3.6Gh|7  
17:09:17 MSG:ucid 9 TCP connected from IP:140.205.225.193! rV}&G!V_t  
G7%f| Y  
(0["|h32,  
17:09:17 MSG:ucid 9:GET /jenkins/ HTTP/1.1 ?2,{+d |  
EMzJyGt7  
06e dVIRr  
17:09:17 MSG:ucid 9 disconnected! 06z+xxCo  
4UHviuOo8  
.'NTy R  
17:09:18 MSG:ucid 10 TCP connected from IP:140.205.225.193! Py#TXzEcC  
]f>0P3O5&  
Dt\rrN:v  
17:09:18 MSG:ucid 10:GET /zabbix/ HTTP/1.1 Q CO,f  
O l;DJV  
J-qUJX~4c  
17:09:18 MSG:ucid 10 disconnected! @VQ<X4 Za  
CSY-{  
dDa&:L  
17:09:18 MSG:ucid 11 TCP connected from IP:140.205.225.193! MT6"b  
3H|drj:KV  
/D964VR1M\  
17:09:18 MSG:ucid 11:GET / HTTP/1.1 wVs"+4l<  
^SK!? M  
bd H+M?k  
17:09:19 MSG:ucid 11 disconnected! }R/we`  
!E|m'_x*  
33&l.[A"!}  
17:09:20 MSG:ucid 12 TCP connected from IP:140.205.225.193! 2.vmZaKP  
2A:&Cqo  
bGkLa/?S  
17:09:20 MSG:ucid 12:GET / HTTP/1.1 P-<1vfThH  
J *38GX+  
Uq~b4X$  
17:09:20 MSG:ucid 12 disconnected! Xpp v  
PpH ;p.-!d  
Q @[gj:w  
17:09:20 MSG:ucid 13 TCP connected from IP:140.205.225.193! jFip-=T{4  
sWB@'P:x  
Gpi_p  
17:09:20 MSG:ucid 13:GET /solr/ HTTP/1.1 H23 O]r  
}Q@~_3,UJ  
[4aw*M1z}.  
17:09:20 MSG:ucid 13 disconnected! e=aU9v L  
6nR EuT'k  
o 0T1pGs'  
17:09:50 MSG:ucid 14 TCP connected from IP:140.205.225.193! 'IT]VRObP  
M2c7 |  
Z} t^i^u  
17:09:50 MSG:ucid 14:GET /j_acegi_security_check HTTP/1.1 tCm]1ZgRW  
e ;^}@X  
<1B+@  
17:09:50 MSG:ucid 14 disconnected! &W c$VDC  
BoST?"&}'  
-Sn'${2  
17:09:50 MSG:ucid 15 TCP connected from IP:140.205.225.193! {jH'W)nR  
La3rX  
3~V .  
17:09:50 MSG:ucid 15:POST /j_acegi_security_check HTTP/1.1 */_'pt  
?L0k|7  
O1)\!=& .  
17:09:50 MSG:ucid 15 disconnected! d0C _:_  
W amOg0  
3Zl:rYD?  
17:09:51 MSG:ucid 16 TCP connected from IP:140.205.225.193! RgL>0s  
eB=&(ZT  
E/*&'Osq  
17:09:51 MSG:ucid 16:POST /j_acegi_security_check HTTP/1.1 f8aY6o"i  
!c{F{ t-a  
1_A_)l11  
17:09:51 MSG:ucid 16 disconnected! `C C=?E  
$COjC!M  
Kd5 8'$  
17:09:51 MSG:ucid 17 TCP connected from IP:140.205.225.193! V=% ;5/  
?FjnG_Uz`D  
#p55/54ZI  
17:09:51 MSG:ucid 17:POST /j_acegi_security_check HTTP/1.1 XZM@Rys  
_H@ATut  
CaO-aL  
17:09:51 MSG:ucid 17 disconnected! J 7G-qF\  
OXbShA&1  
z7gX@@T  
17:09:52 MSG:ucid 18 TCP connected from IP:140.205.225.193! t89Tt@cf  
FKu8R%9xn%  
/*k_`3L  
17:09:52 MSG:ucid 18:POST /j_acegi_security_check HTTP/1.1 ,Kl?-W@  
Cl9nmyf   
X<Z(,B  
17:09:52 MSG:ucid 18 disconnected! X!/Sk1  
~6@`;s`[Y  
uC#@qpzy  
17:09:52 MSG:ucid 19 TCP connected from IP:140.205.225.193! Ez0zk9  
YzQ1c~+  
%)?jaE}[  
17:09:52 MSG:ucid 19:POST /j_acegi_security_check HTTP/1.1 f$:SacF  
FE&:?  
Z[d13G;  
17:09:52 MSG:ucid 19 disconnected! \3^ue0  
{vCtp   
matna  
17:09:53 MSG:ucid 20 TCP connected from IP:140.205.225.193! ,!^5w,P:   
y^}u L|=  
0V(}Zj>  
17:09:53 MSG:ucid 20:POST /j_acegi_security_check HTTP/1.1 Q N#bd~  
HOFxOBV  
nWY^?e'S  
17:09:53 MSG:ucid 20 disconnected! 9g5h~ Ma  
J:glJ'4E  
ix4]^  
17:09:53 MSG:ucid 21 TCP connected from IP:140.205.225.193! 3dj|jw5  
adX"Yg!`{c  
&4S2fWx  
17:09:53 MSG:ucid 21:POST /j_acegi_security_check HTTP/1.1 tMX$8W0 c  
QR'#]k;>%  
{D Q%fneN4  
17:09:53 MSG:ucid 21 disconnected! 7\,9Gcv1  
!h7.xl OpN  
]{\ttb%GX  
17:09:54 MSG:ucid 22 TCP connected from IP:140.205.225.193! ?V^7`3F  
R8Vf6]s_  
ucx02^uA  
17:09:54 MSG:ucid 22:POST /j_acegi_security_check HTTP/1.1 E6-*2U)k+  
0zB[seyE  
9DNp  
17:09:54 MSG:ucid 22 disconnected! ebQgk Y=  
V)>?[  
#6< 1 =I'j  
17:09:54 MSG:ucid 23 TCP connected from IP:140.205.225.193! /GC&@y0yi  
z m$Sw0#(  
fyb;*hgu  
17:09:54 MSG:ucid 23:POST /j_acegi_security_check HTTP/1.1 ^D$|$=|DH  
"U-jZ5o"  
=,#--1R7g  
17:09:54 MSG:ucid 23 disconnected! ?zf3Fn2y  
96(Mu% l  
tO3R&"{  
17:09:55 MSG:ucid 24 TCP connected from IP:140.205.225.193! ~(QfVpRnV=  
x1.S+:  
 Qw}1q!89  
17:09:55 MSG:ucid 24:POST /j_acegi_security_check HTTP/1.1 2+ cs^M3  
73D< wMgZF  
Z_\p8@3aH  
17:09:55 MSG:ucid 24 disconnected! (O5Yd 6u  
6(f 'P_*  
0- )K_JV  
17:09:55 MSG:ucid 25 TCP connected from IP:140.205.225.193! 7~mhWPzMwB  
Kf[d@ L  
R}M ;, G  
17:09:55 MSG:ucid 25:POST /j_acegi_security_check HTTP/1.1 $s/E } X  
lb-1z]YwQ  
S' j g#*$  
17:09:55 MSG:ucid 25 disconnected! eyCZ[SC  
U%nkPIFm  
YNEwX$)M,B  
17:09:56 MSG:ucid 26 TCP connected from IP:140.205.225.193! (90/,@6 6l  
b|d-vnYE  
"]+g5G  
17:09:56 MSG:ucid 26:POST /j_acegi_security_check HTTP/1.1 YA4D?'  
D(AH3`*|#  
N T`S)P*?  
17:09:56 MSG:ucid 26 disconnected! TN2Ln?[xU  
YX0ysE*V:&  
f2i:I1 p("  
17:09:56 MSG:ucid 27 TCP connected from IP:140.205.225.193! HeRi67  
2*|T)OA`m,  
/,Xl8<~#  
17:09:56 MSG:ucid 27:POST /j_acegi_security_check HTTP/1.1 Iux3f+H  
^,>w`8  
r7m~.M+W"  
17:09:56 MSG:ucid 27 disconnected! &|/_"*uM  
fE-R(9K  
C$OVN$lL`8  
17:09:57 MSG:ucid 28 TCP connected from IP:140.205.225.193! -K64J5|b7  
gxv^=;2C  
g4IF~\QRVi  
17:09:57 MSG:ucid 28:POST /j_acegi_security_check HTTP/1.1 =RQF::[h  
}aZuCe_  
O$,F ga  
17:09:57 MSG:ucid 28 disconnected! uE-(^u  
-50DGA,K6  
-*C WF|<G  
17:09:57 MSG:ucid 29 TCP connected from IP:140.205.225.193! z5E%*]  
x< A-Ws{^V  
C= ~c`V5>r  
17:09:57 MSG:ucid 29:GET /phpmyadmin/index.php HTTP/1.1 cq1 5@a mX  
wPlM= .Hq?  
!}(B=-  
17:09:57 MSG:ucid 30 TCP connected from IP:140.205.225.193! 0HzqU31%l@  
NJUKH1lIhR  
IPQRdBQ  
17:09:57 MSG:ucid 30:POST /j_acegi_security_check HTTP/1.1 @(t3<g  
I |Oco?Q"  
y>I2}P  
17:09:57 MSG:ucid 30 disconnected! .ZTvOm'mB^  
yPN'@{ 5#  
c4Ebre-Oa  
17:09:58 MSG:ucid 31 TCP connected from IP:140.205.225.193! 380`>"D  
po| Ux`u  
LP2~UVq  
17:09:58 MSG:ucid 31:POST /j_acegi_security_check HTTP/1.1 9]4Q@%  
L)e" qC_-  
C/kf?:j  
17:09:58 MSG:ucid 31 disconnected! uo9#(6  
FK%b@/7s~  
m'o dVZ7  
17:09:58 MSG:ucid 32 TCP connected from IP:140.205.225.193! RRL{a6(?  
broLC5hbQU  
LrB 0x>  
17:09:58 MSG:ucid 32:POST /j_acegi_security_check HTTP/1.1 E&M(QX5  
Iy<>-e"|  
jK|n^5\  
17:09:58 MSG:ucid 32 disconnected! ~ao:9 ynY  
&f*o rM:  
 vy<W4  
17:09:59 MSG:ucid 33 TCP connected from IP:140.205.225.193! 6u[fCGi%  
ZpTDM1ro  
!/FRL<mp  
17:09:59 MSG:ucid 33:POST /j_acegi_security_check HTTP/1.1 S 'a- E![  
 :eN&wQ5q  
BWt`l,nF  
17:09:59 MSG:ucid 33 disconnected! N /4E ~^2  
je] DR~  
!T 6R[  
17:09:59 MSG:ucid 34 TCP connected from IP:140.205.225.193! 9YzV48su#  
C6!F6Stn]g  
s68(jYC7[  
17:09:59 MSG:ucid 34:POST /j_acegi_security_check HTTP/1.1 2]!@)fio`  
_CwTe=K}  
fY<#KM6X  
17:09:59 MSG:ucid 34 disconnected! NxP(&M(  
j G8;p41  
#M-!/E  
17:10:00 MSG:ucid 35 TCP connected from IP:140.205.225.193! Ailq,  c  
5.rAxdP  
Lqgrt]L_"  
17:10:00 MSG:ucid 35:POST /j_acegi_security_check HTTP/1.1 uwe#& V-  
0ho;L0Nr'  
HuhQ|~C+~  
17:10:00 MSG:ucid 35 disconnected! E7Lqa S  
EPm~@8@"j?  
^<I(  
17:10:00 MSG:ucid 36 TCP connected from IP:140.205.225.193! YxF@1_g  
Z.VKG1e}  
QiK>]xJ'  
17:10:00 MSG:ucid 36:POST /j_acegi_security_check HTTP/1.1 t"=5MaQk-  
4 m:h&^`N  
g5V\R*{  
17:10:00 MSG:ucid 36 disconnected! ,!orD1,'  
,54z9F`  
HTQZIm  
17:10:01 MSG:ucid 37 TCP connected from IP:140.205.225.193! 6bm7^e(  
ON2o^-%=  
+x]/W|5  
17:10:01 MSG:ucid 37:POST /j_acegi_security_check HTTP/1.1 TgiZ % G  
$*q|}Tvl#  
xf,[F8 2y  
17:10:01 MSG:ucid 37 disconnected! *.W3V;K  
s9Hxiw@D  
x|O7}oj  
17:10:01 MSG:ucid 38 TCP connected from IP:140.205.225.193! z,,"yVk`,  
M(X _I`\E  
Iz0$T.T  
17:10:01 MSG:ucid 38:POST /j_acegi_security_check HTTP/1.1 \jfK']P/H  
%"WENa/t  
#Y7jNrxE  
17:10:01 MSG:ucid 38 disconnected! mnm ZO}   
BA@E  
 "J(M.Y  
17:10:02 MSG:ucid 39 TCP connected from IP:140.205.225.193! jVff@)_S  
M7=,J;@  
s~M$Wo8  
17:10:02 MSG:ucid 39:POST /j_acegi_security_check HTTP/1.1 ng}C$d . I  
.S//T/3O]Q  
P< OH{l  
17:10:02 MSG:ucid 39 disconnected! X4%uY  
<h -)zI  
/4x\}qvU  
17:10:02 MSG:ucid 40 TCP connected from IP:140.205.225.193! ^KhJBM/Z  
&gCGc?/R#  
Qs1CK;+zU  
17:10:02 MSG:ucid 40:POST /j_acegi_security_check HTTP/1.1 #b^6>  
{$8+n::  
5,Fq:j)MxW  
17:10:02 MSG:ucid 40 disconnected! x Lan1V  
Yq ]sPE92  
n ]g"H  
17:10:03 MSG:ucid 41 TCP connected from IP:140.205.225.193! ?I+{S  
tVG;A&\,6  
;W- A2g  
17:10:03 MSG:ucid 41:POST /j_acegi_security_check HTTP/1.1 'I,a 29  
_=HaE&  
)U~|QdZ  
17:10:03 MSG:ucid 41 disconnected! (OiV IH  
riW9l6s'  
J4+K)gWB  
17:10:03 MSG:ucid 42 TCP connected from IP:140.205.225.193! _Q+c'q Zkl  
jSjC43lh  
Z5t^D|  
17:10:03 MSG:ucid 42:POST /j_acegi_security_check HTTP/1.1 p7QZn.,=u  
p8'$@:M\  
F^GNOD3J  
17:10:03 MSG:ucid 42 disconnected! v~ SM"ky#  
D>|`+=1'0"  
4EM+Ye  
17:10:04 MSG:ucid 43 TCP connected from IP:140.205.225.193! rt^~ I \V  
xt|^~~ /  
/Bt!xSI  
17:10:04 MSG:ucid 43:POST /j_acegi_security_check HTTP/1.1 '8]p]#l  
&dtst??  
XP)^81i|  
17:10:04 MSG:ucid 43 disconnected! #1-WiweO  
/3M8 ;>@u  
sJZ2e6?n  
17:10:04 MSG:ucid 44 TCP connected from IP:140.205.225.193! y'm!h?8  
uXc;!*  
Y\9}LgIvr  
17:10:04 MSG:ucid 44:POST /j_acegi_security_check HTTP/1.1 W yM1s+@  
_M%>Qm  
1)k+v17]f5  
17:10:04 MSG:ucid 44 disconnected! =!t;e~^8]  
3RaW\cWzg  
u"&?u+1j  
17:10:05 MSG:ucid 45 TCP connected from IP:140.205.225.193! J$}]p  
Po58@g  
g ` s|]VNt  
17:10:05 MSG:ucid 45:POST /j_acegi_security_check HTTP/1.1 <\O+  
kqCsEtm]  
TVcA%]y{;  
17:10:05 MSG:ucid 45 disconnected! d3:GmB .  
JaUzu3*=  
IW~wO  
17:10:05 MSG:ucid 46 TCP connected from IP:140.205.225.193! A1/@KC"&{G  
& jqylX  
P] *x6c^n  
17:10:05 MSG:ucid 46:POST /j_acegi_security_check HTTP/1.1 f|,Kh1{e  
k\[(;9sf.  
`rVru= zoy  
17:10:05 MSG:ucid 46 disconnected! KAnV%j  
Imv#7{ndq  
)'~Jsg-  
17:10:06 MSG:ucid 47 TCP connected from IP:140.205.225.193! {A/^;X{N^  
8</wQ6&|  
\'Ae,q|w  
17:10:06 MSG:ucid 47:POST /j_acegi_security_check HTTP/1.1 yn mjIQ  
o=R(DK# U  
3'.@aMA@  
17:10:06 MSG:ucid 47 disconnected! ^m%#1Zd  
/ :F^*]  
67iI wY*8'  
17:10:06 MSG:ucid 48 TCP connected from IP:140.205.225.193! K\2{SjL:B  
mxqD'^n#  
MoFM'a9  
17:10:06 MSG:ucid 48:POST /j_acegi_security_check HTTP/1.1 ?zBu` 7j  
o*H U^  
Ef#LRcG-Z  
17:10:06 MSG:ucid 48 disconnected! \I!mzo  
QP%_2m>yhl  
KzVi:Hm  
17:10:07 MSG:ucid 49 TCP connected from IP:140.205.225.193! nq{/fD(2  
i"G'#n~e  
-qj[ck(y  
17:10:07 MSG:ucid 49:POST /j_acegi_security_check HTTP/1.1 7Jlkn=9e:  
2'@m'4-N  
w&?XsO@0W  
17:10:07 MSG:ucid 49 disconnected! 8vVE  
S-Y{Vi"2  
8Nzn%0(Q  
17:10:07 MSG:ucid 29 disconnected! hty'L61\z  
Q!P%duO  
9InP2u\&:  
17:10:07 MSG:ucid 50 TCP connected from IP:140.205.225.193! Q~]oN  
FC1rwXL(  
eS!]..%y  
17:10:07 MSG:ucid 50:POST /j_acegi_security_check HTTP/1.1 x/O;8^b  
!Axe}RD'  
,LA'^I?  
17:10:07 MSG:ucid 50 disconnected! aLh(8;$  
WRD z*Zf  
FFqK tj's  
17:10:08 MSG:ucid 51 TCP connected from IP:140.205.225.193! 4fKvB@O@.  
YcA. Bn|as  
;JkIZ8!  
17:10:08 MSG:ucid 51:GET /j_acegi_security_check HTTP/1.1 Rmw=~NP5  
U(f@zGV  
9Rk(q4.OP  
17:10:08 MSG:ucid 51 disconnected! Ixn|BCi60A  
?V2P]|  
E,m|E]WP  
17:10:09 MSG:ucid 52 TCP connected from IP:140.205.225.193! @m5J%8>k  
6 >)fNCe`  
g!~SHW)l  
17:10:09 MSG:ucid 52:POST /j_acegi_security_check HTTP/1.1 E.*hY+kGZ  
&MpLm&  
Xgx/ubca0  
17:10:09 MSG:ucid 52 disconnected! W_wC"?A%  
=u2~=t=LV  
Qp<*o r@  
17:10:09 MSG:ucid 53 TCP connected from IP:140.205.225.193! n=-vOa%  
~a_hOKU5  
6{5T^^x?<  
17:10:09 MSG:ucid 53:POST /j_acegi_security_check HTTP/1.1 &Z~_BT  
V30w`\1A  
} `L;.9  
17:10:09 MSG:ucid 53 disconnected! jP<6J(  
_t-6m2A  
gN}$$vS  
17:10:10 MSG:ucid 54 TCP connected from IP:140.205.225.193! zmQQ/ 7K  
FZgf"XM>  
;}6wj@8He  
17:10:10 MSG:ucid 54:POST /j_acegi_security_check HTTP/1.1 QyA^9@iVs  
?xwi2<zz  
L<dh\5#p9Y  
17:10:10 MSG:ucid 54 disconnected! iY`[dsT  
(tA[]ne2  
gA=Pz[i)p  
17:10:10 MSG:ucid 55 TCP connected from IP:140.205.225.193! tfHr'Qy BC  
<q'?[aKvR  
YN)qMI_ `A  
17:10:10 MSG:ucid 55:POST /j_acegi_security_check HTTP/1.1 8o:h/F  
\ 3E%6L  
\GHj_r  
17:10:10 MSG:ucid 55 disconnected! d0T 8Cwc b  
f]10^y5&  
5q4wREh  
17:10:11 MSG:ucid 56 TCP connected from IP:140.205.225.193! q>%.zc[x  
alRz@N  
L"0dB.  
17:10:11 MSG:ucid 56:POST /j_acegi_security_check HTTP/1.1 A]iT uu5p  
r!w4Br0  
!}|'1HIC  
17:10:11 MSG:ucid 56 disconnected! nd\$Y  
'~yxu$aK  
-c8h!.Q$  
17:10:11 MSG:ucid 57 TCP connected from IP:140.205.225.193! "$5cKbJ  
<b~~X`Z  
SIM> Lz  
17:10:11 MSG:ucid 57:POST /j_acegi_security_check HTTP/1.1  {y{O ze  
= <A0;  
YpZuAJm<2_  
17:10:11 MSG:ucid 57 disconnected! Z[ !kEW  
j<WsFVS  
uYO$gRem  
17:10:12 MSG:ucid 58 TCP connected from IP:140.205.225.193! "8) %XSb  
wtL=^  
(3K,f4S@  
17:10:12 MSG:ucid 58:POST /j_acegi_security_check HTTP/1.1 eF0FQlMe[  
modem6#x'  
WOgkv(5KN  
17:10:12 MSG:ucid 58 disconnected! c=-qbG0`  
s{c|J#s  
+u |SX/C  
17:10:12 MSG:ucid 59 TCP connected from IP:140.205.225.193! \ %xku:  
]#S<]vA  
Jzp|#*~$E  
17:10:12 MSG:ucid 59:GET /phpMyAdmin/index.php HTTP/1.1 !gsrPM  
 `uDOIl  
h8k\~/iJ  
17:10:12 MSG:ucid 60 TCP connected from IP:140.205.225.193! r_8;aPL  
KAVkYL0  
/A>nsN?:]  
17:10:12 MSG:ucid 60:POST /j_acegi_security_check HTTP/1.1 L*rCUv`  
=~,2E;#X  
Om;` "5  
17:10:12 MSG:ucid 60 disconnected! 9 %Vy,  
y(a>Y! dgU  
k8+U0J_{'  
17:10:13 MSG:ucid 61 TCP connected from IP:140.205.225.193! re4z>O*  
%ol1WG9  
oFzmH!&ED  
17:10:13 MSG:ucid 61:POST /j_acegi_security_check HTTP/1.1 p? w^|V  
I !lR 7%  
Rb^G~82d?  
17:10:13 MSG:ucid 61 disconnected! d|gfp:Z`a  
A[F@rUZp  
z X+i2,  
17:10:13 MSG:ucid 62 TCP connected from IP:140.205.225.193! Vvv;m5.  
McbbEs=)  
LF{8hC[  
17:10:13 MSG:ucid 62:POST /j_acegi_security_check HTTP/1.1 6@:<62!;  
 zDxJK  
R9K~b^`  
17:10:13 MSG:ucid 62 disconnected! (_N(K`4#W  
LOwd mj  
=<TJ[,h et  
17:10:14 MSG:ucid 63 TCP connected from IP:140.205.225.193! &:}WfY!hX  
n-GoG(s..b  
JPZH%#E(  
17:10:14 MSG:ucid 63:POST /j_acegi_security_check HTTP/1.1 o>]z~^c  
j]mnH`#BL  
HqyAo]{GN  
17:10:14 MSG:ucid 63 disconnected! _0ZBG(  
2P=~6(  
D mky!Cp  
17:10:14 MSG:ucid 64 TCP connected from IP:140.205.225.193! sQ[N3  
\lwLVe  
PH^Gjm  
17:10:14 MSG:ucid 64:POST /j_acegi_security_check HTTP/1.1 \W\*'C8q\  
i{Du6j^j  
<LJb,l"  
17:10:14 MSG:ucid 64 disconnected!  BJg  
eq<!  
5x,/p  
17:10:15 MSG:ucid 65 TCP connected from IP:140.205.225.193! bV"t;R9  
##alzC  
ao|n<*}  
17:10:15 MSG:ucid 65:POST /j_acegi_security_check HTTP/1.1 )NqRu+j  
VZ 7(6?W  
$++O@C5  
17:10:15 MSG:ucid 65 disconnected! 3kwkU  
AYp~;@  
T)ISDK4>S"  
17:10:15 MSG:ucid 66 TCP connected from IP:140.205.225.193! uK ,W  
M23r/eg]  
@tJic|)x  
17:10:15 MSG:ucid 66:POST /j_acegi_security_check HTTP/1.1 N\rL ~4/  
2Je]dj4  
#k)t.P Q  
17:10:15 MSG:ucid 66 disconnected! 1i)3!fH0:  
=([4pG  
XBO( *6"E  
17:10:16 MSG:ucid 67 TCP connected from IP:140.205.225.193! 7QoMroR  
>6)|># Wi  
64>CfU(  
17:10:16 MSG:ucid 67:POST /j_acegi_security_check HTTP/1.1 x]3[0K5;  
$2-_j)+  
<vD(,||  
17:10:16 MSG:ucid 67 disconnected! j9vK~_?;  
XGjFb4Tw7  
ooC9a>X  
17:10:16 MSG:ucid 68 TCP connected from IP:140.205.225.193! tE-g]y3  
|>.</68Z  
BL"7_phM,  
17:10:16 MSG:ucid 68:POST /j_acegi_security_check HTTP/1.1 sH > zsc  
Ps[#z@5{x  
t*u#4I1  
17:10:16 MSG:ucid 68 disconnected! {];-b0MS~  
A5%$<  
*JQ*$$5  
17:10:17 MSG:ucid 69 TCP connected from IP:140.205.225.193! c& bms)Jwa  
!ab ef.%:  
!]RSG^%s{  
17:10:17 MSG:ucid 69:POST /j_acegi_security_check HTTP/1.1 *;~u 5y2b  
=2ED w_5E  
V w58w`e  
17:10:17 MSG:ucid 69 disconnected! i" )_Xb_1  
ItZYOt|Hn  
M]/DKo  
17:10:17 MSG:ucid 70 TCP connected from IP:140.205.225.193! \xv(&94U  
,VSO;:Z  
FouN}X6  
17:10:17 MSG:ucid 70:POST /j_acegi_security_check HTTP/1.1 6 .)Xeb"  
RVLVY:h|F  
n${k^e-=  
17:10:17 MSG:ucid 70 disconnected! M}f(-,9  
QG2 Zh9R  
Kfr1k  
17:10:18 MSG:ucid 71 TCP connected from IP:140.205.225.193! XoL DqN!  
QCE7VV1Rw  
Xc}XRKiy{  
17:10:18 MSG:ucid 71:POST /j_acegi_security_check HTTP/1.1 G -+!h4p  
h:r?:C>n  
)|^8`f  
17:10:18 MSG:ucid 71 disconnected! ~(kqq#=s  
w`V6vYd@  
w^$C\bCbh  
17:10:18 MSG:ucid 72 TCP connected from IP:140.205.225.193! L/`1K_\l  
lG%697P  
5g/,VMe  
17:10:18 MSG:ucid 72:POST /j_acegi_security_check HTTP/1.1 &} `a"tYr  
aekke//y  
|?8nO.C~V  
17:10:18 MSG:ucid 72 disconnected! zyUS$g]&  
&tvp)B?cWk  
E G\;l9T  
17:10:19 MSG:ucid 73 TCP connected from IP:140.205.225.193! >7%T%2N  
yb ?Pyq.D  
p\lR1  
17:10:19 MSG:ucid 73:POST /j_acegi_security_check HTTP/1.1 "QxULiw  
`Hlf.>b1  
t'@mUX:-A  
17:10:19 MSG:ucid 73 disconnected! 3IlVSR^py  
1BZ##xV*:G  
~uty<fP  
17:10:19 MSG:ucid 74 TCP connected from IP:140.205.225.193! }9fch9>Zr  
f!w/zC .  
e'G=.:  
17:10:19 MSG:ucid 74:POST /j_acegi_security_check HTTP/1.1 UGy3 B)  
#]tDxZ] 6  
#?>)5C\Hqy  
17:10:19 MSG:ucid 74 disconnected! Babzrt-  
8Sj<,+XFq  
UNa "\  
17:10:20 MSG:ucid 75 TCP connected from IP:140.205.225.193! A%Ka)UU+n  
oMj"l#a*  
9]oT/ooM  
17:10:20 MSG:ucid 75:POST /j_acegi_security_check HTTP/1.1 @qp6Y_,E[  
=CK%Zo  
o?>0WSLlm  
17:10:20 MSG:ucid 75 disconnected! nsU7cLf"^V  
1LRP R@b^  
K {v^Y,B  
17:10:20 MSG:ucid 76 TCP connected from IP:140.205.225.193! s0f+AS|}  
p7;K] AW  
[+dCA  
17:10:20 MSG:ucid 76:POST /j_acegi_security_check HTTP/1.1 @i>)x*I#AI  
jsE8=zZs  
z@~H{glo  
17:10:20 MSG:ucid 76 disconnected! 04Zdg:[3-!  
M1-tRF  
V=8db% ^  
17:10:21 MSG:ucid 77 TCP connected from IP:140.205.225.193! 8p%0d`sX  
}'eef"DJ9  
s_NY#MPz[  
17:10:21 MSG:ucid 77:POST /j_acegi_security_check HTTP/1.1 h@$SJe(hl  
}vZf&ib-   
<PDCM8  
17:10:21 MSG:ucid 77 disconnected! t"GnmeH i  
`KA==;0  
KMIe%2:b5  
17:10:21 MSG:ucid 78 TCP connected from IP:140.205.225.193! r4SwvxhG  
5WHz_'c  
 YFm%W@  
17:10:21 MSG:ucid 78:POST /j_acegi_security_check HTTP/1.1 mc?IM(t  
p]RQ-0  
D=z~]a31!  
17:10:21 MSG:ucid 78 disconnected! lu"0\}7X  
.>R`#@+I  
3k/E$wOj  
17:10:22 MSG:ucid 79 TCP connected from IP:140.205.225.193! .J O3#  
ZDmL?mC  
({t^/b*8  
17:10:22 MSG:ucid 79:POST /j_acegi_security_check HTTP/1.1 ]Wkgpfd56  
_S ng55s  
HC$%"peN1b  
17:10:22 MSG:ucid 79 disconnected! n/1t UF  
ZEI)U, I.  
0o>C, `  
17:10:22 MSG:ucid 59 disconnected! X|{Tljn  
2(DhKHrF  
PEvY3F}_rh  
17:10:22 MSG:ucid 80 TCP connected from IP:140.205.225.193! R*:$^v@4  
,1mL=|na  
PSq?8.  
17:10:22 MSG:ucid 80:POST /j_acegi_security_check HTTP/1.1 ; H ;h[  
B.G6vx4yp  
D^ @@ P  
17:10:22 MSG:ucid 80 disconnected! I^k&v V  
N0w?c 5>  
~NK $rHwi%  
17:10:23 MSG:ucid 81 TCP connected from IP:140.205.225.193! (o|bst][S  
fU|v[  
O`y3H lc  
17:10:23 MSG:ucid 81:POST /j_acegi_security_check HTTP/1.1 <CuUwv 'A  
N0S^{j,i  
_" 9 q(1  
17:10:23 MSG:ucid 81 disconnected! eB#I-eD  
f1aZnl  
KuJ9bn{u!C  
17:10:23 MSG:ucid 82 TCP connected from IP:140.205.225.193! ;EJ!I+�  
q3#[6!  
CPy>sV3Ru0  
17:10:23 MSG:ucid 82:POST /j_acegi_security_check HTTP/1.1 tNFw1&  
\|S%zX  
1+*sEIC"  
17:10:23 MSG:ucid 82 disconnected! O;RBK&P  
aC}\`.Kb  
gNW+Dq|X%  
17:10:24 MSG:ucid 83 TCP connected from IP:140.205.225.193! 5c::U=  
=OF hM7  
5.VPK 338A  
17:10:24 MSG:ucid 83:POST /j_acegi_security_check HTTP/1.1 qj _0 td$  
H14Q-2U1xa  
)$TN%hV!  
17:10:24 MSG:ucid 83 disconnected! kZG=C6a  
rEWJ3*Hb  
H[.)&7M\  
17:10:24 MSG:ucid 84 TCP connected from IP:140.205.225.193! `D%i`"~Lf&  
CqEbQ>?  
EmT_T 3v  
17:10:24 MSG:ucid 84:POST /j_acegi_security_check HTTP/1.1 d\>XfS  
m?Y-1!E0  
j?u1\<m  
17:10:24 MSG:ucid 84 disconnected! =7}1NeC`  
"mBM<rEn*  
7_oUuNw  
17:10:25 MSG:ucid 85 TCP connected from IP:140.205.225.193! v K{2  
`l]Lvk8O  
!Np7mv\7  
17:10:25 MSG:ucid 85:POST /j_acegi_security_check HTTP/1.1 yQ/O[(  
2gO@   
:N<Qk  
17:10:25 MSG:ucid 85 disconnected! 8WV5'cX  
E\D,=|Mul  
,Gv}N&  
17:10:25 MSG:ucid 86 TCP connected from IP:140.205.225.193! aR3jeB,=x  
WwsNAJ  
?<4pYEP  
17:10:25 MSG:ucid 86:POST /j_acegi_security_check HTTP/1.1 U<&=pv  
\h'7[vkr  
S}rEQGGR{  
17:10:25 MSG:ucid 86 disconnected! 6rbR0dSgx  
\LJ!X3TZ  
SM)"vr_  
17:10:26 MSG:ucid 87 TCP connected from IP:140.205.225.193! F_:W u,dUZ  
;R0LJApey  
k'%yvlv  
17:10:26 MSG:ucid 87:POST /j_acegi_security_check HTTP/1.1 7ucm1   
Xbmsq,*]  
1v:Ql\^cT  
17:10:26 MSG:ucid 87 disconnected! Vp; `!+z"  
l@SV!keQ  
j7E;\AZ^  
17:10:27 MSG:ucid 88 TCP connected from IP:140.205.225.193! %|+aI?  
'eBD/w5U  
4 ;_g9]  
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 ;/V])4=  
T\.~!Q  
MzB.Vvsy%9  
17:10:37 MSG:ucid 88 disconnected!  g4q{ ]  
.0yBI=QI  
{.oz^~zs]g  
17:10:42 MSG:ucid 89 TCP connected from IP:140.205.225.193! o% Q7 el$f  
bx2<WdLyT  
- s'W^(  
17:10:42 MSG:ucid 89:GET /pmd/index.php HTTP/1.1 .n_Z0&i/w  
0x5\{f  
%h0BA.r  
17:10:52 MSG:ucid 89 disconnected! bHm/ZZx  
dY. X/f  
PUD8  
17:10:57 MSG:ucid 90 TCP connected from IP:140.205.225.193! h3E}Sa(MQ:  
7)}_'p  
88:YU4:l`N  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 a{e 2*V  
OR+_s @Yg  
MV3K'<Y  
17:11:07 MSG:ucid 90 disconnected! 6&<QjO  
/ho7~C+H*e  
?z|Bf@TJ[+  
17:11:12 MSG:ucid 91 TCP connected from IP:140.205.225.193! !|V_DsP  
8cvSA&l(D  
M`Wk@t6>  
17:11:12 MSG:ucid 91:GET /phpMyAdmin/index.php HTTP/1.1 A>Qu`%g*  
F@ |(  
JgHYuLB  
17:11:22 MSG:ucid 91 disconnected! /Dc54U n  
[vuikJP>1k  
3NZK$d=4  
17:11:27 MSG:ucid 92 TCP connected from IP:140.205.225.193! F@ pf._c  
^; U}HAY  
m@I}$  
17:11:27 MSG:ucid 92:GET /pma/index.php HTTP/1.1 w(S&X"~  
-;8a* F  
Exv!!0Cd^  
17:11:37 MSG:ucid 92 disconnected! I)jAdd  
Z s| *+[  
6Rif&W.xy  
17:11:42 MSG:ucid 93 TCP connected from IP:140.205.225.193! }9B},  
N|"q6M !ZL  
U+ Yu_=o{  
17:11:42 MSG:ucid 93:GET /pmd/index.php HTTP/1.1 dKXzFyW  
45Zh8k  
ZF#lh]  
17:11:52 MSG:ucid 93 disconnected! v^t oe  
{@x-T  
D > U(&n  
17:12:05 MSG:ucid 94 TCP connected from IP:140.205.225.193! Z3Ww@&bU  
tNqSCjQ~_c  
h?ijZHG $  
17:12:08 MSG:ucid 94 disconnected! JAMV@  
3*7klu  
$%&OaAg  
17:14:33 MSG:httpsrv stop success!
[ 此帖被jiangyong在2017-05-19 17:44重新编辑 ]
级别: 小白
发帖
27
云币
31
只看该作者 沙发  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
基本就是这些; D#Mz#\4o  
GET / HTTP/1.1 mZ?QtyljT  
GET /clusters.jsf HTTP/1.1 7a/ BS(kq<  
GET /jenkins/ HTTP/1.1 va#].4_  
GET /zabbix/ HTTP/1.1 VGCd)&s  
GET /solr/ HTTP/1.1 )T slI  
GET /j_acegi_security_check HTTP/1.1 x>J(3I5_b  
POST /j_acegi_security_check HTTP/1.1 u<Ch]m+  
04Uyr;y  
GET不到j_acegi_security_check 就不断的POST,程序根本就是不支持POST命令。
级别: 小白
发帖
27
云币
31
只看该作者 板凳  发表于: 05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 J'I1NeK  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 ]% G#x  
k$Ug;`v#  
GET这些又是啥子意思呢?
级别: 分析狮
发帖
1630
云币
1777
只看该作者 地板  发表于: 05-20
云盾安全扫描,避免爆.破
发表主题 回复主题
« 返回列表上一主题下一主题

限100 字节
批量上传需要先选择文件,再选择上传
 
验证问题: ECS是阿里云提供的什么服务? 正确答案:云服务器
上一个 下一个