阿里云
发表主题 回复主题
  • 1307阅读
  • 3回复

[求助]把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。

级别: 小白
发帖
27
云币
31
己写了一个简易的http协议升级wesocket协议,绑定到8080端口,又不是标准的http协议80端口,为何阿里要用http协议来扫描8080端口。下面是记录的日志(只开了10分钟): |7'yk__m  
U*R~w5W.[  
}rMpp[  
17:01:39 MSG:ucid 1 TCP connected from IP:120.132.3.151! D 917[ <$  
kJ<Xq   
NX{-D}1X=  
17:01:39 MSG:ucid 2 TCP connected from IP:120.132.3.151! Pl5NHVr  
w6In{uO-Z  
jQ\ MB  
17:01:39 MSG:ucid 3 TCP connected from IP:120.132.3.151! QWW7I.9r  
l6DIsR  
seV;f^-hR  
17:01:39 MSG:ucid 3:GET http://www.qq.com/404/search_children.js HTTP/1.1 <# x%A0  
%J ( }D7-,  
#2vG_B<M)  
17:01:39 MSG:ucid 3 disconnected! cA*X$j6  
i!}nGJGg  
L z>{FOR  
17:01:44 MSG:ucid 1 disconnected! e}O-I  
gZ >orZL'  
H.mQbD`X  
17:01:44 MSG:ucid 2 disconnected! OTHd1PSOu  
Y <i}"eI*  
yJ`1},^  
17:08:08 MSG:ucid 4 TCP connected from IP:140.205.225.193! sd@gEp)L  
D*r Zaqy  
6p]R)K>wS  
17:08:08 MSG:ucid 4:GET / HTTP/1.1 G8DIig<  
rKs WS~U  
X-r,>o:  
17:08:08 MSG:ucid 4 disconnected! Hkz~9p  
M^Ay,jK!  
SU}oKii /  
17:08:14 MSG:ucid 5 TCP connected from IP:140.205.225.193! *9{Wn7pck/  
"KE38`NL  
+:Q/<^Z  
17:08:14 MSG:ucid 5:GET / HTTP/1.1 CU^3L|f2N  
B';> Hk  
(5DGs_>  
17:08:14 MSG:ucid 5 disconnected! nMdN$E  
!#gE'(J;c  
Qufv@.'AY  
17:08:34 MSG:ucid 6 TCP connected from IP:140.205.225.193! n zrCOMld  
o^"3C1j  
wp GnS  
17:08:34 MSG:ucid 6:GET / HTTP/1.1 tBI+uu aa2  
gsm^{jB  
4bi\$   
17:08:34 MSG:ucid 6 disconnected! Mciq9{8&  
z2q5f :d8  
4m(>"dHP  
17:08:38 MSG:ucid 7 TCP connected from IP:140.205.225.193! NITx;iC  
9Kx:^~}20o  
YYr&r.6  
17:08:38 MSG:ucid 7:GET /clusters.jsf HTTP/1.1 0THAI  
Vd>.fb\U2  
7b%Cl   
17:08:38 MSG:ucid 7 disconnected! ~teW1lMu(  
zXU{p\;)\  
:;Rt#!  
17:09:16 MSG:ucid 8 TCP connected from IP:140.205.225.193! Z3~*R7G8>  
ko>O ~@r  
zd4y5/aoS  
17:09:16 MSG:ucid 8:GET / HTTP/1.1 {u6fa>R&$  
yBh"qnOT  
UKQ&TV}0  
17:09:16 MSG:ucid 8 disconnected! v4~Xv5|w^F  
_`[6jhNa!  
yzR=:0J  
17:09:17 MSG:ucid 9 TCP connected from IP:140.205.225.193! Y]Vc}-a(h  
J}KktD@!O  
"UnSZ[;t  
17:09:17 MSG:ucid 9:GET /jenkins/ HTTP/1.1 NRF%Qd8I/2  
"Am0.c/  
!TZ/PqcE  
17:09:17 MSG:ucid 9 disconnected! q$'&RG  
 AlaN;  
CHP6H}#|g  
17:09:18 MSG:ucid 10 TCP connected from IP:140.205.225.193! kzpbs?<;  
8%f! X51  
'[8jm=Q#'  
17:09:18 MSG:ucid 10:GET /zabbix/ HTTP/1.1 k 0Yixa  
Qs X59d  
V46[whL%r  
17:09:18 MSG:ucid 10 disconnected! !Qa7-  
K"$ky,tU  
E9-'!I!  
17:09:18 MSG:ucid 11 TCP connected from IP:140.205.225.193! ;FflEL<7Y  
H,` XCG  
31Mc<4zI8  
17:09:18 MSG:ucid 11:GET / HTTP/1.1 _'p;V[(+M  
~0Q72  
K): sq{  
17:09:19 MSG:ucid 11 disconnected! 3h4"Rv=,  
5D*V%v  
~kT{O!x}4  
17:09:20 MSG:ucid 12 TCP connected from IP:140.205.225.193! /loN Outw  
u Aa>6R  
%'O(Y{$Y.  
17:09:20 MSG:ucid 12:GET / HTTP/1.1 K L~sEli  
0N_Da N  
b"bj|qF~E  
17:09:20 MSG:ucid 12 disconnected! YWFHiB7x  
%&(\dt&R1h  
uB5o Ghu-  
17:09:20 MSG:ucid 13 TCP connected from IP:140.205.225.193! !W^II>Y  
E#p6A5  
dUSuhT  
17:09:20 MSG:ucid 13:GET /solr/ HTTP/1.1 n//a;m  
,CF~UX% bU  
YO+d+5  
17:09:20 MSG:ucid 13 disconnected! -H]O&u3'c  
gk%ye&:f  
*n5g";k|  
17:09:50 MSG:ucid 14 TCP connected from IP:140.205.225.193! 6V/mR~F1r  
)dcGV$4t[  
| 'G$}]H  
17:09:50 MSG:ucid 14:GET /j_acegi_security_check HTTP/1.1 VE m[F/'  
!>j- j  
2c]O Mtk  
17:09:50 MSG:ucid 14 disconnected! s]OXB {M  
VF.S)='>Eu  
 >TgO|mq  
17:09:50 MSG:ucid 15 TCP connected from IP:140.205.225.193! l[Oxf|  
HtlXbzN%)  
qm@hD>W+  
17:09:50 MSG:ucid 15:POST /j_acegi_security_check HTTP/1.1 l|9`22G  
cvt2P}ma#  
$2 0*&4y^  
17:09:50 MSG:ucid 15 disconnected! ga1RMRu+  
r@aFB@   
-v] 0@jNe  
17:09:51 MSG:ucid 16 TCP connected from IP:140.205.225.193! gnt[l0m  
xi0&"?7la  
IU/*YI%W  
17:09:51 MSG:ucid 16:POST /j_acegi_security_check HTTP/1.1 Gf>T{Q`,is  
JaEyVe  
h 9/68Gc?6  
17:09:51 MSG:ucid 16 disconnected! 3.Qwn.   
_G42|lA$/  
qabM@+m[  
17:09:51 MSG:ucid 17 TCP connected from IP:140.205.225.193! mz''-1YY$  
q#1um @m3  
1'=brc YR  
17:09:51 MSG:ucid 17:POST /j_acegi_security_check HTTP/1.1 SU^/qF%8  
zKZ6Qjd8!  
|<S9nZg%p  
17:09:51 MSG:ucid 17 disconnected! ;a|A1DmZ  
MLJ8m  
~$5[#\5%G  
17:09:52 MSG:ucid 18 TCP connected from IP:140.205.225.193! XyhdsH5%3!  
Q"\[ICu!,  
N4r`czoj  
17:09:52 MSG:ucid 18:POST /j_acegi_security_check HTTP/1.1 l#%w,gX  
,Tpds^  
sfH|sp  
17:09:52 MSG:ucid 18 disconnected! +r '  
[@(zGb8  
WZ ZD  
17:09:52 MSG:ucid 19 TCP connected from IP:140.205.225.193! @|M10r9E  
H7WKnn@  
@$aCUJ/mE  
17:09:52 MSG:ucid 19:POST /j_acegi_security_check HTTP/1.1 A%Ao yy4E  
jtA Yp3M-$  
=|6IyL_N  
17:09:52 MSG:ucid 19 disconnected! StE4n0V  
y|X[NSA  
UOq$88sr  
17:09:53 MSG:ucid 20 TCP connected from IP:140.205.225.193! [scPs,5Y  
L3&NGcd  
1=s%.0  
17:09:53 MSG:ucid 20:POST /j_acegi_security_check HTTP/1.1 xi-^_I  
Ly3^zF W  
O,7P6  
17:09:53 MSG:ucid 20 disconnected! %H:!/'45  
Y40{v(Pi  
gB?#T  
17:09:53 MSG:ucid 21 TCP connected from IP:140.205.225.193! M6?*\ 9E  
{&3n{XrF(  
hD;[}8qN{  
17:09:53 MSG:ucid 21:POST /j_acegi_security_check HTTP/1.1 $g*|h G/{  
wAITE|H<zj  
ybfNG@N*  
17:09:53 MSG:ucid 21 disconnected! 7Rq;V=2YV  
~v2_vEu}JX  
O||M |  
17:09:54 MSG:ucid 22 TCP connected from IP:140.205.225.193! 4e9mN~  
v50=D/&w  
6kHAoERp  
17:09:54 MSG:ucid 22:POST /j_acegi_security_check HTTP/1.1 *V>Iv/(  
)Nk^;[  
]^"*Fdn  
17:09:54 MSG:ucid 22 disconnected! Uq7 y4zJ  
fk9FR^u  
\DpXs[1  
17:09:54 MSG:ucid 23 TCP connected from IP:140.205.225.193! jg#%h`  
 |G{TA  
GV* B$  
17:09:54 MSG:ucid 23:POST /j_acegi_security_check HTTP/1.1 CpO!xj +  
GKSfr8US4  
2?#IwT'  
17:09:54 MSG:ucid 23 disconnected! _yumUk-QW  
0d~>zKho  
j $a,93P5  
17:09:55 MSG:ucid 24 TCP connected from IP:140.205.225.193! 3S ,D~L^  
,i e84o  
k~h'`(  
17:09:55 MSG:ucid 24:POST /j_acegi_security_check HTTP/1.1 pl%3RVpoc  
,vl][MhM  
pS;jrq I#  
17:09:55 MSG:ucid 24 disconnected! (pNA8i%=G  
nJNdq`y2  
G ,An8GR%&  
17:09:55 MSG:ucid 25 TCP connected from IP:140.205.225.193! Op A  
'/G.^Zl9  
Vnlns2pQl  
17:09:55 MSG:ucid 25:POST /j_acegi_security_check HTTP/1.1 q0,Diouq  
ggIz) </  
_0<qS{RW  
17:09:55 MSG:ucid 25 disconnected! q ;1]M[&  
LSS3(l[,:  
"z8L}IC!e5  
17:09:56 MSG:ucid 26 TCP connected from IP:140.205.225.193! @.6l^"L  
J*IC&jH:  
be}^}w=  
17:09:56 MSG:ucid 26:POST /j_acegi_security_check HTTP/1.1 89?$xm_m  
u(S~V+<@Z  
m_wBRan  
17:09:56 MSG:ucid 26 disconnected! RBd{1on  
VQI  
UJ3l8 %/`k  
17:09:56 MSG:ucid 27 TCP connected from IP:140.205.225.193! +}@1X&v:  
>vF=}1_L  
D7T(B=S6  
17:09:56 MSG:ucid 27:POST /j_acegi_security_check HTTP/1.1 ^NKB  
:80!-F*\  
[Dni>2@0  
17:09:56 MSG:ucid 27 disconnected! EW7heIT$  
!)FM/Xj,o  
jl YnV/ ]  
17:09:57 MSG:ucid 28 TCP connected from IP:140.205.225.193! `'H"|WsT  
WB<_AIt+  
)>abB?RZ  
17:09:57 MSG:ucid 28:POST /j_acegi_security_check HTTP/1.1 1'@/ jR  
~vgm; O  
}c?/-ab>  
17:09:57 MSG:ucid 28 disconnected! Op%}.9ed  
U2l7@uDr;  
xrd@GTaI  
17:09:57 MSG:ucid 29 TCP connected from IP:140.205.225.193! u?6L.^Op  
_PUgK\  
Exd$v"s Y  
17:09:57 MSG:ucid 29:GET /phpmyadmin/index.php HTTP/1.1 tp"dho  
AvnK?*5!@  
|>(d^<nR^v  
17:09:57 MSG:ucid 30 TCP connected from IP:140.205.225.193! Vf<VKP[9K  
OW!cydA-  
X+2aP'D  
17:09:57 MSG:ucid 30:POST /j_acegi_security_check HTTP/1.1 -v"\WmcS  
=8FV&|fP  
)pELCk  
17:09:57 MSG:ucid 30 disconnected! `@?f@p$(B  
xDv5'IGBb  
2 |lm'Hf  
17:09:58 MSG:ucid 31 TCP connected from IP:140.205.225.193! T*YbmI]4  
i Lr*W#E  
T4MB~5,i  
17:09:58 MSG:ucid 31:POST /j_acegi_security_check HTTP/1.1 )Lt|]|1B{  
GiI|6z!  
fT9z 4[M  
17:09:58 MSG:ucid 31 disconnected! <k'JhMwN  
uFxhr2 <z  
zGKDH=Yy ;  
17:09:58 MSG:ucid 32 TCP connected from IP:140.205.225.193! F~j U;L  
f%r0K6p  
\Y;LbB8D  
17:09:58 MSG:ucid 32:POST /j_acegi_security_check HTTP/1.1 " p]bsJG  
|KSd@   
o&M2POI~q  
17:09:58 MSG:ucid 32 disconnected! R1.No_`PHq  
Lbb{z  
Bqo8G->  
17:09:59 MSG:ucid 33 TCP connected from IP:140.205.225.193! !=%E&e]  
cspO5S>#  
Om #m":  
17:09:59 MSG:ucid 33:POST /j_acegi_security_check HTTP/1.1 0}'  
b'i-/l$  
|0!oSNJ  
17:09:59 MSG:ucid 33 disconnected! 7PE3>cD  
)C>4? )  
k&Z3v.  
17:09:59 MSG:ucid 34 TCP connected from IP:140.205.225.193! E+XpgR5  
&+t! LM  
|a!AgvNF  
17:09:59 MSG:ucid 34:POST /j_acegi_security_check HTTP/1.1 77y_?di^I  
-9Iz$ (>a  
c;\}R#  
17:09:59 MSG:ucid 34 disconnected! wPhN_XV  
a%3V< "f  
@WcK<Qho  
17:10:00 MSG:ucid 35 TCP connected from IP:140.205.225.193! Sw##C l#  
vfb~S~|U6g  
:4o08M%  
17:10:00 MSG:ucid 35:POST /j_acegi_security_check HTTP/1.1 z'cK,psq(  
Ie3 F  
!@ERAPuk  
17:10:00 MSG:ucid 35 disconnected! i21ybXA=Z  
AGwFD  
8u+FWbOl]  
17:10:00 MSG:ucid 36 TCP connected from IP:140.205.225.193! 'G3;!xk$  
S<RJ46  
[X >sG)0S~  
17:10:00 MSG:ucid 36:POST /j_acegi_security_check HTTP/1.1 fC!]MhA"i  
6.]x@=Wm  
1PwqW g-\\  
17:10:00 MSG:ucid 36 disconnected! [3Qu @;"&  
Z1V%pg>]*  
BIx Z4Ft  
17:10:01 MSG:ucid 37 TCP connected from IP:140.205.225.193! YXD6GJWo  
%m\dNUz4g  
W'2a1E  
17:10:01 MSG:ucid 37:POST /j_acegi_security_check HTTP/1.1 6mH0|:CsY  
7_$Xt)Y{  
C)2Waj}  
17:10:01 MSG:ucid 37 disconnected! MGUzvSf  
O0?.$f9 s  
fX)C8J^=G  
17:10:01 MSG:ucid 38 TCP connected from IP:140.205.225.193! MMs#Y1dH  
I`%\ "bF@  
2FHWOy /N@  
17:10:01 MSG:ucid 38:POST /j_acegi_security_check HTTP/1.1 eT??F  
\ Y[  
INQ0h`T  
17:10:01 MSG:ucid 38 disconnected! fFG, ^;7-O  
AF5$U8jf  
Wb!"L`m  
17:10:02 MSG:ucid 39 TCP connected from IP:140.205.225.193! g(d9=xq@k  
$Iuf(J-5[  
~GL"s6C$`;  
17:10:02 MSG:ucid 39:POST /j_acegi_security_check HTTP/1.1 esCm`?qCP  
P.bBu  
v3 $+ l1  
17:10:02 MSG:ucid 39 disconnected! imcq H  
hQ!slO  
m&)5QX  
17:10:02 MSG:ucid 40 TCP connected from IP:140.205.225.193! CJA5w[m  
n-m+@jRz  
Vl;GQe  
17:10:02 MSG:ucid 40:POST /j_acegi_security_check HTTP/1.1 as\6XW$;Q  
#E`-b9Q  
Ux_tHyc/  
17:10:02 MSG:ucid 40 disconnected! 5IeF |#g  
Tjo K]]  
%GUu{n<6  
17:10:03 MSG:ucid 41 TCP connected from IP:140.205.225.193! ` aTkIo:ms  
V|.3Z\(  
wN,DTmtD  
17:10:03 MSG:ucid 41:POST /j_acegi_security_check HTTP/1.1 1 h(oty2p  
/{pVYY  
b#p)bcz!I  
17:10:03 MSG:ucid 41 disconnected! 2.)@u~^Q  
[u[`!L=  
mG[S"?C  
17:10:03 MSG:ucid 42 TCP connected from IP:140.205.225.193! Q+/:5Z C  
X E]YKJ?|k  
+pU\;x  
17:10:03 MSG:ucid 42:POST /j_acegi_security_check HTTP/1.1 +(/?$dRH  
YH33E~f  
c-z 2[a8  
17:10:03 MSG:ucid 42 disconnected! eCB(!Y|  
XHu Y'\;-  
4HlOv % 8  
17:10:04 MSG:ucid 43 TCP connected from IP:140.205.225.193! usiv`.  
|fdr\t#'~  
"Y@rNmBj  
17:10:04 MSG:ucid 43:POST /j_acegi_security_check HTTP/1.1 Y(IT#x?p  
gd'#K~?  
}49X  N  
17:10:04 MSG:ucid 43 disconnected! Q!/<=95E  
q;3,}emg  
G)\s{qk  
17:10:04 MSG:ucid 44 TCP connected from IP:140.205.225.193! zmkqqiDp_  
[\CQ_qs|  
w)-@?jN  
17:10:04 MSG:ucid 44:POST /j_acegi_security_check HTTP/1.1 (g,lDU[=  
xN wKTIK$  
}OO(uC2  
17:10:04 MSG:ucid 44 disconnected! 8 [i#x|`g  
$2E n^  
f !t2a//  
17:10:05 MSG:ucid 45 TCP connected from IP:140.205.225.193! V^aX^;  
+7?p& -r)x  
CBx1.xL  
17:10:05 MSG:ucid 45:POST /j_acegi_security_check HTTP/1.1 y XZZ)i_  
>T{9-_#P  
\UFno$;mA  
17:10:05 MSG:ucid 45 disconnected! V x1C4  
9Ue3 %?~c  
x8%Q TTY  
17:10:05 MSG:ucid 46 TCP connected from IP:140.205.225.193! ~/1kCZB  
/b,+YyWi%  
%? +A.0]E  
17:10:05 MSG:ucid 46:POST /j_acegi_security_check HTTP/1.1 Ixm< wKwW#  
L>$yslH; b  
^_3idLE  
17:10:05 MSG:ucid 46 disconnected! k:PO"<-U  
E^L  
dA> t  
17:10:06 MSG:ucid 47 TCP connected from IP:140.205.225.193! W >eJGZ<  
x|*v(,7b]!  
QQP bKok>  
17:10:06 MSG:ucid 47:POST /j_acegi_security_check HTTP/1.1 #*q`/O5n  
'1;Q'-/J  
bs U$mtW  
17:10:06 MSG:ucid 47 disconnected! ]]@jvU_?kS  
;RZ@t6^  
[CBA Lj5  
17:10:06 MSG:ucid 48 TCP connected from IP:140.205.225.193! x3T)/'(  
L q8}z-?  
owZj Q  
17:10:06 MSG:ucid 48:POST /j_acegi_security_check HTTP/1.1 > C{^{?~u  
9 Am&G  
.g DWv  
17:10:06 MSG:ucid 48 disconnected! Xtbuy/8"1  
is?`tre\P  
<`5>;Xn=  
17:10:07 MSG:ucid 49 TCP connected from IP:140.205.225.193! Tn2Z{.q$  
@Ek''a$  
YQ X+lE  
17:10:07 MSG:ucid 49:POST /j_acegi_security_check HTTP/1.1 tY !fO>Fn~  
ZT4._|2  
2H;&E1:  
17:10:07 MSG:ucid 49 disconnected! ^Tc&?\3  
^"v~hjM#  
-"u}lCz>  
17:10:07 MSG:ucid 29 disconnected! A?|KA<&m#u  
l"o@.C} f/  
!I]fNTv<  
17:10:07 MSG:ucid 50 TCP connected from IP:140.205.225.193! 4ao oBY$  
>T;"bc b  
" jn@S-  
17:10:07 MSG:ucid 50:POST /j_acegi_security_check HTTP/1.1 l>h%J,W  
?|TVz!3  
+e<P7}ZQ  
17:10:07 MSG:ucid 50 disconnected! #Bj{ 4OeV  
yxQxc5/X)  
bB3Mpaw@  
17:10:08 MSG:ucid 51 TCP connected from IP:140.205.225.193! kLMg|48fdI  
ir qlU  
n9gj{]%  
17:10:08 MSG:ucid 51:GET /j_acegi_security_check HTTP/1.1 NLw#b?%  
#!rng]p  
,$Qa]UN5Q  
17:10:08 MSG:ucid 51 disconnected! %\\l/{`eW  
\    
6g8{;6x  
17:10:09 MSG:ucid 52 TCP connected from IP:140.205.225.193! :y!e6  
1lfkb1BM  
'[I_Iu#,  
17:10:09 MSG:ucid 52:POST /j_acegi_security_check HTTP/1.1 K+dkImkh  
\ lP c,8)  
w4:S>6X  
17:10:09 MSG:ucid 52 disconnected! '?E^\\"*  
PP/M-Jql)  
gZ   
17:10:09 MSG:ucid 53 TCP connected from IP:140.205.225.193! )s,L:{<  
~IZ'zuc  
5xwztcR-  
17:10:09 MSG:ucid 53:POST /j_acegi_security_check HTTP/1.1 "w9`UFu%^e  
Ul^/Dh  
qCSJ=T;  
17:10:09 MSG:ucid 53 disconnected! ]7O)iq%  
,G e7 9(  
ul/=1]1?  
17:10:10 MSG:ucid 54 TCP connected from IP:140.205.225.193! "u Xl  
gZ%B9i:  
GbwcbfH  
17:10:10 MSG:ucid 54:POST /j_acegi_security_check HTTP/1.1 <_uLf9j a  
ED"@!M`1  
T_\HU*\  
17:10:10 MSG:ucid 54 disconnected! -6;0 x  
dD1`[%  
C<r7d [  
17:10:10 MSG:ucid 55 TCP connected from IP:140.205.225.193! pAtHU(}  
!(*mcYA*W  
sVZb[|zSri  
17:10:10 MSG:ucid 55:POST /j_acegi_security_check HTTP/1.1 NOP~?p  
4 `Z@^W  
i^ G/)bq  
17:10:10 MSG:ucid 55 disconnected! ] ^to r  
v/c8P\  
oylY1~~}0K  
17:10:11 MSG:ucid 56 TCP connected from IP:140.205.225.193! `x lsvK>  
zawU  
!oLrN/-  
17:10:11 MSG:ucid 56:POST /j_acegi_security_check HTTP/1.1 3q R@$pm  
?O8NyCeb7  
C (vi ns  
17:10:11 MSG:ucid 56 disconnected! ilw<Q-o4(  
lJ3/^Htn  
_J 6|ju\  
17:10:11 MSG:ucid 57 TCP connected from IP:140.205.225.193!  $Tfq9  
Vl{CD>$,  
30*^ERO  
17:10:11 MSG:ucid 57:POST /j_acegi_security_check HTTP/1.1 K$\az%NE  
(sW:^0p  
_U1~^ucV  
17:10:11 MSG:ucid 57 disconnected! n&i WYECz  
+uM1#-+h  
rFM`ne<zh  
17:10:12 MSG:ucid 58 TCP connected from IP:140.205.225.193! 1.o-2:]E  
V5i_\A  
: :uD%a zd  
17:10:12 MSG:ucid 58:POST /j_acegi_security_check HTTP/1.1 c,Zs. kC  
4\pi<#X  
uTpKT7t  
17:10:12 MSG:ucid 58 disconnected! q =b.!AZy  
UG s <<  
qlIC{:E0  
17:10:12 MSG:ucid 59 TCP connected from IP:140.205.225.193! U)zd~ug?m  
xp7,0'(;  
S6 $S%$  
17:10:12 MSG:ucid 59:GET /phpMyAdmin/index.php HTTP/1.1 ndOPD]A'  
vPR1 TMi>  
VD,F?L!  
17:10:12 MSG:ucid 60 TCP connected from IP:140.205.225.193! PkLRQ}  
?Gp~i]  
uwj/]#`  
17:10:12 MSG:ucid 60:POST /j_acegi_security_check HTTP/1.1 z<+".sD'  
Fh? ;,Z  
H #J"'  
17:10:12 MSG:ucid 60 disconnected! W2wDSP-   
Vvm6T@b M8  
+AZ=nMgW  
17:10:13 MSG:ucid 61 TCP connected from IP:140.205.225.193! (gNI6;P;}  
3LG}x/l  
n #p6i  
17:10:13 MSG:ucid 61:POST /j_acegi_security_check HTTP/1.1 -]Z!_[MlDF  
fm;1Iu#  
DOkEWqM!  
17:10:13 MSG:ucid 61 disconnected! .Ap[C? mV  
RoxzCFsI\  
B+jT|Y'  
17:10:13 MSG:ucid 62 TCP connected from IP:140.205.225.193! $sU?VA'h  
UIL5K   
9'3bzhT$  
17:10:13 MSG:ucid 62:POST /j_acegi_security_check HTTP/1.1 !#rZ eDmw  
<.l5>mgkCw  
56G5JSB=\  
17:10:13 MSG:ucid 62 disconnected! ~"gOq"y 5p  
K>RL  
Aw4Qm2Kf  
17:10:14 MSG:ucid 63 TCP connected from IP:140.205.225.193! 2N5 N^S  
q .tVNKy%  
j6/ 3p|E  
17:10:14 MSG:ucid 63:POST /j_acegi_security_check HTTP/1.1 <9"s&G@  
E-X-LR{CC  
UldKlQ8  
17:10:14 MSG:ucid 63 disconnected! Xvi{A]V  
#E^%h  
&m'O :ZS2  
17:10:14 MSG:ucid 64 TCP connected from IP:140.205.225.193! IB}.J,=  
E"#<I*b  
O_-.@uo./(  
17:10:14 MSG:ucid 64:POST /j_acegi_security_check HTTP/1.1 eY\tO"Hc  
0K7-i+\#  
OMJr.u  
17:10:14 MSG:ucid 64 disconnected! I}n"6'*  
xtpD/,2  
U,RIr8G  
17:10:15 MSG:ucid 65 TCP connected from IP:140.205.225.193! xdYjl.f  
EIEwrC  
)lB-D;3[_  
17:10:15 MSG:ucid 65:POST /j_acegi_security_check HTTP/1.1 ~i))Zc3,g\  
b2U[W#  
WVy"MD  
17:10:15 MSG:ucid 65 disconnected! rvw1'y  
DMfC(w.d  
/PPk p9H{  
17:10:15 MSG:ucid 66 TCP connected from IP:140.205.225.193! aFIet55o  
q/Q^\HTk  
+8Peh9"  
17:10:15 MSG:ucid 66:POST /j_acegi_security_check HTTP/1.1 q?} G?n 4  
G`6U t  
O- |RPW}  
17:10:15 MSG:ucid 66 disconnected! kZUuRB~om  
eZ}FKg%2[  
tE>3.0U0Q  
17:10:16 MSG:ucid 67 TCP connected from IP:140.205.225.193! y,Dfqt  
C$ZY=UXz!T  
>f`}CLsY  
17:10:16 MSG:ucid 67:POST /j_acegi_security_check HTTP/1.1 eHqf3f   
8P5xRUkV  
F4bF&% R  
17:10:16 MSG:ucid 67 disconnected! !ae@g q'  
#GWQ]r?  
HK2`.'D  
17:10:16 MSG:ucid 68 TCP connected from IP:140.205.225.193! .~b6wi&n  
35&&*$Jm  
T,WWQm  
17:10:16 MSG:ucid 68:POST /j_acegi_security_check HTTP/1.1 u6(7#n02  
?$ YE  
^QYI`u`4  
17:10:16 MSG:ucid 68 disconnected! w`!Yr:dU  
1$xt=*.u|  
jj.]R+.G  
17:10:17 MSG:ucid 69 TCP connected from IP:140.205.225.193! 0&5}[9?V'  
b[*d i{?-  
3FX` dZ  
17:10:17 MSG:ucid 69:POST /j_acegi_security_check HTTP/1.1 b~#rUOXb8?  
55,vmDd  
J~c]9t  
17:10:17 MSG:ucid 69 disconnected! $f)Y !<bC  
4pc=MR  
sM?DNE^BvW  
17:10:17 MSG:ucid 70 TCP connected from IP:140.205.225.193! F$+_Z~yt3;  
rNgE/=X  
jkD5Z`D  
17:10:17 MSG:ucid 70:POST /j_acegi_security_check HTTP/1.1 #p_ ~L4iW  
/CX<k gz@  
$"_D"/*  
17:10:17 MSG:ucid 70 disconnected! ?cpID8Z  
nY~CAo/:  
y-Z*qR?  
17:10:18 MSG:ucid 71 TCP connected from IP:140.205.225.193! d}WAP m  
B*?v`6  
kB  :")$  
17:10:18 MSG:ucid 71:POST /j_acegi_security_check HTTP/1.1 .WtaU  
&}P62&  
o9Agx{'oV  
17:10:18 MSG:ucid 71 disconnected! X59~)rH,  
nE/T)[1|  
e|{6^g<ru  
17:10:18 MSG:ucid 72 TCP connected from IP:140.205.225.193! 7v=Nh  
0}w>8L7i{  
4Ly!:GH3T  
17:10:18 MSG:ucid 72:POST /j_acegi_security_check HTTP/1.1 Ag?@fuk$J  
T4Zp5m")  
' ;$2j~  
17:10:18 MSG:ucid 72 disconnected! 8-+IcyUza  
rZzto;NDS  
|EF*]qI  
17:10:19 MSG:ucid 73 TCP connected from IP:140.205.225.193! ?)JW}3<.  
4} =]QQoE  
fe&K2C%bm  
17:10:19 MSG:ucid 73:POST /j_acegi_security_check HTTP/1.1 %,)[%>#{  
~+4OG 0  
1?mQ fW@G  
17:10:19 MSG:ucid 73 disconnected! '2# O{  
lN^L#m*@  
%n{E/06f  
17:10:19 MSG:ucid 74 TCP connected from IP:140.205.225.193! ,.F,]m=  
%>pglI  
FIW*N r  
17:10:19 MSG:ucid 74:POST /j_acegi_security_check HTTP/1.1 scrNnO[3j  
44b'40  
yyBfLPXZ  
17:10:19 MSG:ucid 74 disconnected! s8 3_Bd  
D'A)H  
.dl1sv U  
17:10:20 MSG:ucid 75 TCP connected from IP:140.205.225.193! 6g7 X1C  
h-#Glse<  
@8DA  
17:10:20 MSG:ucid 75:POST /j_acegi_security_check HTTP/1.1 %tmK6cY4Y  
"-N%`UA  
>\KBXS}  
17:10:20 MSG:ucid 75 disconnected! lE%0ifu  
1C'lT,twl  
=|am=Q?Q  
17:10:20 MSG:ucid 76 TCP connected from IP:140.205.225.193! ~ ]o .Mv a  
~Kt.%K5lgt  
{:'e H  
17:10:20 MSG:ucid 76:POST /j_acegi_security_check HTTP/1.1 !^B`7  
?hsOhUs(5  
`O0v2?/f0  
17:10:20 MSG:ucid 76 disconnected! o;-)84Aa  
:DQHb"(  
WG(tt.  
17:10:21 MSG:ucid 77 TCP connected from IP:140.205.225.193! /GfC/)1_  
]\*g/QV  
S9-K  
17:10:21 MSG:ucid 77:POST /j_acegi_security_check HTTP/1.1 QT^W00h  
=U3 !D;XP  
 t\u0\l>  
17:10:21 MSG:ucid 77 disconnected! YVqhX]/   
=f=MtH?0y  
B9Y "J  
17:10:21 MSG:ucid 78 TCP connected from IP:140.205.225.193! C$ nT&06o  
n%W~+  
}.MJVB3  
17:10:21 MSG:ucid 78:POST /j_acegi_security_check HTTP/1.1 4k<4=E  
5\RKT)%X  
Gl`Yyw@84  
17:10:21 MSG:ucid 78 disconnected! >\3=h8zw  
RcMW%q$dG  
$w#C;2k]N  
17:10:22 MSG:ucid 79 TCP connected from IP:140.205.225.193! 8H3|^J  
S1*n4w.H  
=w_y<V4  
17:10:22 MSG:ucid 79:POST /j_acegi_security_check HTTP/1.1 }4  5|  
Xn9TQ"[4  
1k3wBc 5<  
17:10:22 MSG:ucid 79 disconnected! |j<b?  
b78'yM&  
buG0#:  
17:10:22 MSG:ucid 59 disconnected! 9<}d98  
OGrp {s  
fG2\p&z  
17:10:22 MSG:ucid 80 TCP connected from IP:140.205.225.193! tWdj"n%  
thl{IU  
K/ I3r_  
17:10:22 MSG:ucid 80:POST /j_acegi_security_check HTTP/1.1 Qte=<Z)  
U}_l]gNn  
-U'6fx) +  
17:10:22 MSG:ucid 80 disconnected! KYu3dC'/,&  
 #/MUiV  
Dwe_ytjpc  
17:10:23 MSG:ucid 81 TCP connected from IP:140.205.225.193! uhbo/7d'7  
(zCas}YAKI  
n!~{4 uUW  
17:10:23 MSG:ucid 81:POST /j_acegi_security_check HTTP/1.1 ?SkYFa`u*  
.3 m^yo c/  
L'`W5B@  
17:10:23 MSG:ucid 81 disconnected! )PVX)2P_C  
#3f\,4K5  
d_-{-@  
17:10:23 MSG:ucid 82 TCP connected from IP:140.205.225.193! 0jro0f'  
xbxU`2/  
w*eO9k  
17:10:23 MSG:ucid 82:POST /j_acegi_security_check HTTP/1.1 %19TJn%J$  
,3qi]fFLMe  
bT@3fuL4  
17:10:23 MSG:ucid 82 disconnected! H :}|UW  
bu1O<*  
l[fU0;A  
17:10:24 MSG:ucid 83 TCP connected from IP:140.205.225.193! = iB0ak  
P`v%< 9~  
-e3m!h  
17:10:24 MSG:ucid 83:POST /j_acegi_security_check HTTP/1.1   lCr  
/ ~'ZtxA  
SuMK=^>%  
17:10:24 MSG:ucid 83 disconnected! ^PMP2\JQA  
s_y Y,Z:  
<VS\z(K  
17:10:24 MSG:ucid 84 TCP connected from IP:140.205.225.193! l}&egq DC  
Z,.*!S=?h  
N J9H=  
17:10:24 MSG:ucid 84:POST /j_acegi_security_check HTTP/1.1 79AOvh  
cxFfAk\,en  
,9^wKS!7$  
17:10:24 MSG:ucid 84 disconnected! $cHA_$ `  
B8NOPbT  
 )f>s\T  
17:10:25 MSG:ucid 85 TCP connected from IP:140.205.225.193! SWvy< f4<  
7z9gsi  
A_6b 4T  
17:10:25 MSG:ucid 85:POST /j_acegi_security_check HTTP/1.1 ;]3Tuq  
o /AEp)8  
?*zRM?*  
17:10:25 MSG:ucid 85 disconnected! i|0H {q  
}A'QXtI/G  
9]r6V   
17:10:25 MSG:ucid 86 TCP connected from IP:140.205.225.193! P^#<h"Ht  
sNZ{OD+  
#8z2>&:|  
17:10:25 MSG:ucid 86:POST /j_acegi_security_check HTTP/1.1 sc\4.Ux%Q  
/KFCq|;7s,  
3#}5dO  
17:10:25 MSG:ucid 86 disconnected! WBLfxr  
B v /]>Z  
JL45!+  
17:10:26 MSG:ucid 87 TCP connected from IP:140.205.225.193! "l6v[yv  
,d'x]&a  
\2~Cn c*O  
17:10:26 MSG:ucid 87:POST /j_acegi_security_check HTTP/1.1 xH!{;i  
6|+I~zJ88  
`j{ 5$X  
17:10:26 MSG:ucid 87 disconnected! L6c =uN  
avrf]raM|  
PB*m D7"  
17:10:27 MSG:ucid 88 TCP connected from IP:140.205.225.193! _"%mLH=!8  
yPL1(i;  
,r!_4|\  
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 >xb}AY;  
me"}1REa  
.I_Mmaq;i  
17:10:37 MSG:ucid 88 disconnected! g0NtM%  
0+p <Jc!  
u+"3l@Y#  
17:10:42 MSG:ucid 89 TCP connected from IP:140.205.225.193! ~fbFA?g3  
_0p8FhNt  
pLi_)(#z_  
17:10:42 MSG:ucid 89:GET /pmd/index.php HTTP/1.1 N K.]yw'  
KvW {M  
".Z|zt6C  
17:10:52 MSG:ucid 89 disconnected! CmKbpN*  
tjYqdbA)  
5jAiqJq~y:  
17:10:57 MSG:ucid 90 TCP connected from IP:140.205.225.193!  _dCdyf  
H y}oSy26  
9cQZ`Ex  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 y}Ji( q~  
uL| Wuq  
LCKCg[D  
17:11:07 MSG:ucid 90 disconnected! c&4EO|  
~.\CG'g  
lr[U6CJY  
17:11:12 MSG:ucid 91 TCP connected from IP:140.205.225.193! 9n\:grW  
cCOw7<  
jFS])",\i  
17:11:12 MSG:ucid 91:GET /phpMyAdmin/index.php HTTP/1.1 HoE@t-S  
IqEE.XhaK  
rD ^ b{]E3  
17:11:22 MSG:ucid 91 disconnected! `wIMu$i  
o3C7JG  
C]/]ot0%t  
17:11:27 MSG:ucid 92 TCP connected from IP:140.205.225.193! ZbBz@1O  
!' ;1;k);  
[\|`C4@3a  
17:11:27 MSG:ucid 92:GET /pma/index.php HTTP/1.1 ]k0Pe;<  
Wgp}v93  
I$yFCdXr  
17:11:37 MSG:ucid 92 disconnected! EL/~c*a/  
8rZJvE#c  
 8kn> ?  
17:11:42 MSG:ucid 93 TCP connected from IP:140.205.225.193! ] {sx#|_S  
$qndG,([F  
lk/T| 0])  
17:11:42 MSG:ucid 93:GET /pmd/index.php HTTP/1.1 "INIP?  
!UPKy$  
}.ZT?p\  
17:11:52 MSG:ucid 93 disconnected! goa@ e  
 Z|t`}lK  
&7-ENg9 [  
17:12:05 MSG:ucid 94 TCP connected from IP:140.205.225.193! r^g"%nq9/  
JCe%;U  
5)@UpcjUA  
17:12:08 MSG:ucid 94 disconnected! 'sII/sq`(  
}Mv$Up  
r]+/"~a  
17:14:33 MSG:httpsrv stop success!
[ 此帖被jiangyong在2017-05-19 17:44重新编辑 ]
级别: 小白
发帖
27
云币
31
只看该作者 沙发  发表于: 2017-05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
基本就是这些; >?L)+*^  
GET / HTTP/1.1 Jx+e_k$gHO  
GET /clusters.jsf HTTP/1.1 E*"-U!?)l2  
GET /jenkins/ HTTP/1.1 bxc!x>)  
GET /zabbix/ HTTP/1.1 }VU7wMk  
GET /solr/ HTTP/1.1 lj US-6  
GET /j_acegi_security_check HTTP/1.1 hy}n&h  
POST /j_acegi_security_check HTTP/1.1 #qcF2&a%  
>gT QD\k:D  
GET不到j_acegi_security_check 就不断的POST,程序根本就是不支持POST命令。
级别: 小白
发帖
27
云币
31
只看该作者 板凳  发表于: 2017-05-19
Re把日志做的更详细些,终于看到了阿里扫描用户的8080端口在做什么。
17:10:27 MSG:ucid 88:GET /pma/index.php HTTP/1.1 [+3~wpU(p  
17:10:57 MSG:ucid 90:GET /phpmyadmin/index.php HTTP/1.1 w:|YOeP  
PBY;S G ~  
GET这些又是啥子意思呢?
级别: 分析狮
发帖
1653
云币
1802
只看该作者 地板  发表于: 2017-05-20
云盾安全扫描,避免爆.破
发表主题 回复主题
« 返回列表上一主题下一主题

限100 字节
如果您提交过一次失败了,可以用”恢复数据”来恢复帖子内容
 
验证问题: 92 - 91 = ?
上一个 下一个