求分析 NginX 日志，是被做了代理吗？

这两个 IP 频繁请求国内网站，不知道是怎么回事。host并不是我的域名，求解！

[29/Mar/2015:17:19:33 +0800]
from (120.132.77.252, 5888) by -
GET http://www.ly.com/ HTTP/1.1 status:302 166
host:www.ly.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0"

[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50227) by -
HEAD http://www.alimama.com/ HTTP/1.1 status:302 0
host:www.alimama.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.0 (Windows; U; Windows NT 5.1; ) AppleWebKit/534.12 (KHTML, like Gecko) Maxthon/3.0 Safari/534.12"

[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50223) by -
HEAD http://www.google.com/ HTTP/1.1 status:302 0
host:www.google.com refer:- scheme:http
chashuibiao.org UA:"Opera/9.80 (Windows NT 5.1; U; zh-cn) Presto/2.9.168 Version/11.50"

[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50226) by -
HEAD http://www.qq.com/ HTTP/1.1 status:302 0
host:www.qq.com refer:- scheme:http
chashuibiao.org UA:"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)"

[29/Mar/2015:17:21:03 +0800]
from (121.41.102.163, 50224) by -
HEAD http://www.baidu.com/ HTTP/1.1 status:302 0
host:www.baidu.com refer:- scheme:http
chashuibiao.org UA:"Opera/9.80 (Windows NT 5.1; U; zh-cn) Presto/2.9.168 Version/11.50"

[29/Mar/2015:17:21:04 +0800]
from (121.41.102.163, 50222) by -
CONNECT login.taobao.com:443 HTTP/1.1 status:400 178
host:chashuibiao.org refer:- scheme:http
chashuibiao.org UA:"-"

CLR

NET

Windows

2 条回复 2015-03-30 00:44:48 +08:00

ryd994

2015-03-29 17:41:17 +08:00

首先确认你的nginx并不提供代理服务，就用浏览器设置代理到80试试
然后如果只是偶然的就不必在意，扫端口的人太多了，习惯就好

Sfan

2015-03-30 00:44:48 +08:00

Nginx加一段配置吧..

server {
listen *:80 default;
server_name _ "";
return 444;
access_log off;
}