谁能帮我解释以下apache生成的日志

Jakecat 2003-08-24 09:00:14
谁能帮我解释以下apache生成的日志
是不是被攻击了?如何防范?
谢谢

218.13.46.128 - - [24/Aug/2003:20:13:20 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.25.129.164 - - [24/Aug/2003:20:13:21 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
61.145.152.159 - - [24/Aug/2003:20:13:21 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
12.21.138.250 - - [24/Aug/2003:20:13:24 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
61.161.64.162 - - [24/Aug/2003:20:13:30 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
65.117.201.201 - - [24/Aug/2003:20:13:31 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.1.149.101 - - [24/Aug/2003:20:13:33 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.2.150.97 - - [24/Aug/2003:20:13:33 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.63.164.240 - - [24/Aug/2003:20:13:32 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.109.106.70 - - [24/Aug/2003:20:13:40 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
203.168.166.151 - - [24/Aug/2003:20:13:44 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
219.104.56.116 - - [24/Aug/2003:20:13:48 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.204.95.253 - - [24/Aug/2003:20:13:52 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
202.113.19.243 - - [24/Aug/2003:20:13:53 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
161.76.112.6 - - [24/Aug/2003:20:13:55 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.4.80.87 - - [24/Aug/2003:20:13:58 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
218.18.76.212 - - [24/Aug/2003:20:14:14 +0800] "GET / HTTP/1.1" 200 32058 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"
...全文
207 4 打赏 收藏 转发到动态 举报
写回复
用AI写文章
4 条回复
切换为时间正序
请发表友善的回复…
发表回复
vitalgg 2003-08-28
  • 打赏
  • 举报
回复
没有.
请求的是网站根目录,而且IP各不相同.

攻击代码类似于下面这种.(IIS的UNICODE漏洞)
218.11.222.21 - - [20/Aug/2003:14:50:48 +0800] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 298
Jakecat 2003-08-27
  • 打赏
  • 举报
回复
是不是被攻击了?怎么老发空请求啊?
vitalgg 2003-08-25
  • 打赏
  • 举报
回复
最后一个是所使用的客户代理.(如IE,NS,Mozille等)
vitalgg 2003-08-25
  • 打赏
  • 举报
回复
"%h %l %u %t \"%r\" %>s %b"
客户IP 远程登录名 远程用户 [时间] "请求的第一行" 状态码 返回的字节数

24,923

社区成员

发帖
与我相关
我的任务
社区描述
Web 开发 Apache
社区管理员
  • Apache
加入社区
  • 近7日
  • 近30日
  • 至今
社区公告
暂无公告

试试用AI创作助手写篇文章吧