求分析 NginX 日志,是被做了代理吗?
- 0次
- 2021-05-26 14:42:12
- idczone
这两个 IP 频繁请求国内网站,不知道是怎么回事。host并不是我的域名,求解!
[29/Mar/2015:17:19:33 +0800]
from (120.132.77.252, 5888) by -
GET http://www.ly.com/ HTTP/1.1 status:302 166
host:www.ly.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.抗投诉服务器0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0"
[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50227) by -
HEAD http://www.alimama.com/ HTTP/1.1 status:302 0
host:www.alimama.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.0 (Windows; U; Windows NT 5.1; ) AppleWebKit/534.12 (KHTML, like Gecko) Maxthon/3.0 Safari/534.12"
[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50223) by -
HEAD http://www.google.com/ HTTP/1.1 status:302 0
host:www.google.com refer:- scheme:http
chashuibiao.org UA:"Opera/9.80 (Windows NT 5.1; U; zh-cn) Presto/2.9.168 Version/11.50"
[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50226) by -
HEAD http://www.qq.com/ HTTP/1.1 status:302 0
host:www.qq.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)"
[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50224) by -
HEAD http://www.baidu.com/ HTTP/1.1 status:302 0
host:www.baidu.com refer:- scheme:http
chashuibiao.org UA:"Opera/9.80 (Windows NT 5.1; U; zh-cn) Presto/2.9.168 Version/11.50"
[29/Mar/2015:17:21:04 +0800]
from (121.41.102.163, 50222) by -
CONNECT login.taobao.com:443 HTTP/1.1 status:400 178
host:chashuibiao.org refer:- scheme:http
chashuibiao.org UA:"-"
首先确认你的nginx并不提供代理服务,就用浏览器设置代理到80试试
然后如果只是偶然的就不必在意,扫端口的人太多了,习惯就好
Nginx加一段配置吧..
server {
listen *:80 default;
server_name _ "";
return 444;
access_log off;
}