Apache 里的 access.log 记录的 get url 不是本站的

2016-05-04 15:47:56 +08:00
 ArthurKing

截取的某个 ip 的

120.132.95.89 - - [03/May/2016:20:00:40 -0400] "GET http://www.elong.comhttphttphttphttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttphttphttphttp/www.elong.comhttphttphttphtt phttphttphttphttp/www.elong.comhttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttp/www.elong.comhttphttphttphttphttp/www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www .elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 779 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:39 -0400] "GET http://www.elong.comhttphttphttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphtt phttp/www.elong.comhttphttphttphttphttphttp/www.elong.comhttphttphttphttphttp/www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HT TP/1.1" 301 721 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:39 -0400] "GET http://www.elong.comhttphttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttp/www.el ong.comhttphttphttphttphttp/www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 667 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:38 -0400] "GET http://www.elong.comhttphttphttphttphttphttphttp/www.elong.comhttphttphttphttphttphttp/www.elong.comhttphttphttphttphttp/www.elong.comhttph ttphttphttp/www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 617 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:38 -0400] "GET http://www.elong.comhttphttphttphttphttphttp/www.elong.comhttphttphttphttphttp/www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www. elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 571 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:37 -0400] "GET http://www.elong.comhttphttphttphttphttp/www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/ww w.elong.com/ HTTP/1.1" 301 529 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:36 -0400] "GET http://www.elong.comhttphttphttphttp/www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 491 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:36 -0400] "GET http://www.elong.comhttphttphttp/www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 457 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:35 -0400] "GET http://www.elong.comhttphttp/www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 427 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/201 00101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:35 -0400] "GET http://www.elong.comhttp/www.elong.com/ HTTP/1.1" 301 401 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0" 120.132.95.89 - - [03/May/2016:20:00:34 -0400] "GET http://www.elong.com/ HTTP/1.1" 301 379 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0"

这种访问是要干什么?网站推广?

1964 次点击
所在节点    问与答
6 条回复
julyclyde
2016-05-04 17:35:17 +08:00
这问题问的……为什么一定要是你这里的 URL ?
日志记录的是客观事实,有什么访问就记录什么内容
你还能管住客户端发啥请求么?
lxy
2016-05-04 17:55:54 +08:00
扫描代理,不过这一连串请求的确有点奇葩。
^……在我写完上面一句话之后又看了一下。感觉你这配置处理得不好,我只用过 nginx 不知道 apache 是什么情况,估计是因为你返回 301 重定向,于是请求网址越加越长……对于这种请求我直接返回 400 或 444 ( nginx )
shiji
2016-05-04 18:18:01 +08:00
也有可能是别人的域名有问题, A 记录乱指。碰巧指到你的机器上了。我遇到过很多 xx.com/糖尿病怎么治 之类的
ytmsdy
2016-05-04 18:27:09 +08:00
应该是代理扫描吧,我的站也经常性有类似于这样子的请求。
ArthurKing
2016-05-05 14:22:05 +08:00
@julyclyde 不是管他发啥。不过做啥事按说都有个目的性,不知道发这玩意的目的何在呢?
julyclyde
2016-05-05 20:58:43 +08:00
@ArthurKing 上面几位已经说了,是扫描代理。如果你的服务器配置为代理模式,或者干脆就是个代理服务器在这里工作,就会替客户去请求实际的服务器,而不是返回错误代码
尤其是你看 GET 后面是完整网址而不是只有路径部分,这是典型的代理请求格式

这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。

https://www.v2ex.com/t/276275

V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。

V2EX is a community of developers, designers and creative people.

© 2021 V2EX