- 论坛徽章:
- 0
|
上一次被入侵到现在 已经一个多月了 ，旧事现在同样发生！
系统信息：
Linux version 2.6.34-12-desktop (geeko@buildhost) (gcc version 4.5.0 20100604 [gcc-4_5-branch revision 160292] (SUSE Linux) ) #1 SMP PREEMPT 2010-06-29 02:39:08 +0200
Apache：
Server version: Apache/2.2.29 (Unix)
tomcat:
Server version: Apache Tomcat/6.0.36
Server built: Oct 16 2012 09:59:09
Server number: 6.0.36.0
OS Name: Linux
OS Version: 2.6.34-12-desktop
Architecture: amd64
JVM Version: 1.6.0_29-b11
JVM Vendor: Sun Microsystems Inc.
apache 反向代理 ajp转到到的tomcat上 不过最近linux被入侵了
这是被入侵后 一次截图 被人上传了文件
fk.sh 和hald mmm ssh 会被无休止循环 相互到一个IP wget其他的文件
造成的效果就是 对某个IP或者某几个 tcp 连接 产生大量流量
查看系统日志 登录日志 都无异常
根据这几天的排查唯一有用的日志已过滤：
715 222.178.179.181 - - [23/Dec/2014:09:32:13 +0800] "POST / HTTP/1.1" 200 -
5214 222.178.179.181 - - [23/Dec/2014:11:23:08 +0800] "POST / HTTP/1.1" 200 -
6004 222.178.179.181 - - [23/Dec/2014:12:44:58 +0800] "POST / HTTP/1.1" 200 -
6029 222.178.179.181 - - [23/Dec/2014:12:45:54 +0800] "POST / HTTP/1.1" 200 -
7124 222.178.179.181 - - [23/Dec/2014:13:59:33 +0800] "POST / HTTP/1.1" 200 -
7639 222.178.179.181 - - [23/Dec/2014:14:31:27 +0800] "POST / HTTP/1.1" 200 -
12802 222.178.179.181 - - [24/Dec/2014:09:53:38 +0800] "POST / HTTP/1.1" 200 -
13946 222.178.179.181 - - [24/Dec/2014:10:09:17 +0800] "POST / HTTP/1.1" 200 -
14480 222.178.179.181 - - [24/Dec/2014:10:10:50 +0800] "POST / HTTP/1.1" 200 -
15017 222.178.179.181 - - [24/Dec/2014:10:12:01 +0800] "POST / HTTP/1.1" 200 -
29048 222.178.179.181 - - [24/Dec/2014:13:06:11 +0800] "POST / HTTP/1.1" 200 -
29104 222.178.179.181 - - [24/Dec/2014:13:08:11 +0800] "POST / HTTP/1.1" 200 -
29145 222.178.179.181 - - [24/Dec/2014:13:14:46 +0800] "POST / HTTP/1.1" 200 -
41188 222.178.179.181 - - [24/Dec/2014:15:03:38 +0800] "POST / HTTP/1.1" 200 -
50583 222.178.179.181 - - [24/Dec/2014:15:40:07 +0800] "POST / HTTP/1.1" 200 -
52040 222.178.179.181 - - [24/Dec/2014:16:01:13 +0800] "POST / HTTP/1.1" 200 -
58706 222.186.52.91 - - [24/Dec/2014:23:05:16 +0800] "POST / HTTP/1.1" 200 32
58707 222.186.52.91 - - [24/Dec/2014:23:05:20 +0800] "POST / HTTP/1.1" 302 -
59628 222.186.52.91 - - [25/Dec/2014:07:13:07 +0800] "POST / HTTP/1.1" 200 20002
59629 222.186.52.91 - - [25/Dec/2014:07:13:20 +0800] "POST / HTTP/1.1" 200 20002
59630 222.186.52.91 - - [25/Dec/2014:07:13:26 +0800] "POST / HTTP/1.1" 200 20002
59631 222.186.52.91 - - [25/Dec/2014:07:13:33 +0800] "POST / HTTP/1.1" 200 20002
59632 222.186.52.91 - - [25/Dec/2014:07:13:41 +0800] "POST / HTTP/1.1" 200 20002
60306 222.178.179.181 - - [25/Dec/2014:10:29:43 +0800] "POST / HTTP/1.1" 200 -
64074 222.178.179.181 - - [25/Dec/2014:17:05:57 +0800] "POST / HTTP/1.1" 200 -
64075 222.178.179.181 - - [25/Dec/2014:17:05:57 +0800] "POST / HTTP/1.1" 200 -
64076 222.178.179.181 - - [25/Dec/2014:17:05:57 +0800] "POST / HTTP/1.1" 200 -
66906 222.178.179.181 - - [26/Dec/2014:10:36:22 +0800] "POST / HTTP/1.1" 200 -
67589 222.178.179.181 - - [26/Dec/2014:11:31:19 +0800] "POST / HTTP/1.1" 200 -
79985 222.178.179.181 - - [30/Dec/2014:11:30:14 +0800] "POST / HTTP/1.1" 200 -
83348 222.178.179.181 - - [30/Dec/2014:16:52:54 +0800] "POST / HTTP/1.1" 200 -
85567 222.186.52.91 - - [31/Dec/2014:11:54:08 +0800] "POST / HTTP/1.1" 302 -
85569 222.186.52.91 - - [31/Dec/2014:11:54:13 +0800] "POST / HTTP/1.1" 302 -
85571 222.186.52.91 - - [31/Dec/2014:11:54:20 +0800] "POST / HTTP/1.1" 200 32
85572 222.186.52.91 - - [31/Dec/2014:11:54:24 +0800] "POST / HTTP/1.1" 200 20002
85573 222.186.52.91 - - [31/Dec/2014:11:54:48 +0800] "POST / HTTP/1.1" 200 20002
85574 222.186.52.91 - - [31/Dec/2014:11:54:53 +0800] "POST / HTTP/1.1" 200 20002
85575 222.186.52.91 - - [31/Dec/2014:11:55:03 +0800] "POST / HTTP/1.1" 200 20002
85577 222.186.52.91 - - [31/Dec/2014:11:55:10 +0800] "POST / HTTP/1.1" 200 20002
85579 222.186.52.91 - - [31/Dec/2014:11:55:55 +0800] "POST / HTTP/1.1" 200 20002
85713 222.186.52.91 - - [31/Dec/2014:12:32:22 +0800] "POST / HTTP/1.1" 200 20002
85714 222.186.52.91 - - [31/Dec/2014:12:32:26 +0800] "POST / HTTP/1.1" 200 20002
85715 222.186.52.91 - - [31/Dec/2014:12:32:33 +0800] "POST / HTTP/1.1" 200 20002
85717 222.186.52.91 - - [31/Dec/2014:12:34:02 +0800] "POST / HTTP/1.1" 200 20002
85718 222.186.52.91 - - [31/Dec/2014:12:34:21 +0800] "POST / HTTP/1.1" 200 20002
85719 222.186.52.91 - - [31/Dec/2014:12:34:28 +0800] "POST / HTTP/1.1" 200 20002
85743 222.186.52.91 - - [31/Dec/2014:12:35:10 +0800] "POST / HTTP/1.1" 200 20002
85745 222.186.52.91 - - [31/Dec/2014:12:36:17 +0800] "POST / HTTP/1.1" 200 20002
85746 222.186.52.91 - - [31/Dec/2014:12:36:26 +0800] "POST / HTTP/1.1" 200 20002
85747 222.186.52.91 - - [31/Dec/2014:12:36:30 +0800] "POST / HTTP/1.1" 302 -
85749 222.186.52.91 - - [31/Dec/2014:12:36:36 +0800] "POST / HTTP/1.1" 200 20002
85750 222.186.52.91 - - [31/Dec/2014:12:36:45 +0800] "POST / HTTP/1.1" 200 20002
85752 222.186.52.91 - - [31/Dec/2014:12:37:15 +0800] "POST / HTTP/1.1" 200 20002
85753 222.186.52.91 - - [31/Dec/2014:12:37:23 +0800] "POST / HTTP/1.1" 200 20002
85754 222.186.52.91 - - [31/Dec/2014:12:37:23 +0800] "POST / HTTP/1.1" 200 20002
85756 222.186.52.91 - - [31/Dec/2014:12:38:14 +0800] "POST / HTTP/1.1" 200 20002
85757 222.186.52.91 - - [31/Dec/2014:12:38:15 +0800] "POST / HTTP/1.1" 200 20002
85758 222.186.52.91 - - [31/Dec/2014:12:38:26 +0800] "POST / HTTP/1.1" 200 20002
85762 222.186.52.91 - - [31/Dec/2014:12:39:10 +0800] "POST / HTTP/1.1" 200 20002
85763 222.186.52.91 - - [31/Dec/2014:12:39:24 +0800] "POST / HTTP/1.1" 200 20002
85764 222.186.52.91 - - [31/Dec/2014:12:39:25 +0800] "POST / HTTP/1.1" 200 20002
85765 222.186.52.91 - - [31/Dec/2014:12:39:31 +0800] "POST / HTTP/1.1" 200 20002
85766 222.186.52.91 - - [31/Dec/2014:12:39:38 +0800] "POST / HTTP/1.1" 200 20002
85772 222.186.52.91 - - [31/Dec/2014:12:39:52 +0800] "POST / HTTP/1.1" 200 20002
85781 222.186.52.91 - - [31/Dec/2014:12:42:33 +0800] "POST / HTTP/1.1" 200 20002
85783 222.186.52.91 - - [31/Dec/2014:12:44:31 +0800] "POST / HTTP/1.1" 200 20002
85785 222.186.52.91 - - [31/Dec/2014:12:45:07 +0800] "POST / HTTP/1.1" 200 20002
85826 222.186.52.91 - - [31/Dec/2014:13:20:37 +0800] "POST / HTTP/1.1" 200 20002
85828 222.186.52.91 - - [31/Dec/2014:13:20:58 +0800] "POST / HTTP/1.1" 302 -
85830 222.186.52.91 - - [31/Dec/2014:13:21:02 +0800] "POST / HTTP/1.1" 302 -
85831 222.186.52.91 - - [31/Dec/2014:13:21:02 +0800] "POST / HTTP/1.1" 302 -
85834 222.186.52.91 - - [31/Dec/2014:13:21:24 +0800] "POST / HTTP/1.1" 302 -
85836 222.186.52.91 - - [31/Dec/2014:13:21:29 +0800] "POST / HTTP/1.1" 302 -
85837 222.186.52.91 - - [31/Dec/2014:13:21:30 +0800] "POST / HTTP/1.1" 302 -
85840 222.186.52.91 - - [31/Dec/2014:13:21:39 +0800] "POST / HTTP/1.1" 200 20002
85841 222.186.52.91 - - [31/Dec/2014:13:21:41 +0800] "POST / HTTP/1.1" 200 20002
85842 222.186.52.91 - - [31/Dec/2014:13:21:41 +0800] "POST / HTTP/1.1" 200 20002
85843 222.186.52.91 - - [31/Dec/2014:13:21:42 +0800] "POST / HTTP/1.1" 200 20002
85844 222.186.52.91 - - [31/Dec/2014:13:21:48 +0800] "POST / HTTP/1.1" 200 20002
85845 222.186.52.91 - - [31/Dec/2014:13:21:58 +0800] "POST / HTTP/1.1" 200 20002
85846 222.186.52.91 - - [31/Dec/2014:13:22:44 +0800] "POST / HTTP/1.1" 200 20002
86215 222.186.52.91 - - [31/Dec/2014:14:19:41 +0800] "POST / HTTP/1.1" 200 32
86216 222.186.52.91 - - [31/Dec/2014:14:19:41 +0800] "POST / HTTP/1.1" 302 -
86218 222.186.52.91 - - [31/Dec/2014:14:19:43 +0800] "POST / HTTP/1.1" 302 -
86279 222.186.52.91 - - [31/Dec/2014:14:23:47 +0800] "POST / HTTP/1.1" 200 32
86280 222.186.52.91 - - [31/Dec/2014:14:23:47 +0800] "POST / HTTP/1.1" 302 -
86282 222.186.52.91 - - [31/Dec/2014:14:23:48 +0800] "POST / HTTP/1.1" 302 -
86285 222.186.52.91 - - [31/Dec/2014:14:25:15 +0800] "POST / HTTP/1.1" 200 32
86286 222.186.52.91 - - [31/Dec/2014:14:25:15 +0800] "POST / HTTP/1.1" 302 -
86288 222.186.52.91 - - [31/Dec/2014:14:25:16 +0800] "POST / HTTP/1.1" 302 -
88110 222.186.52.91 - - [01/Jan/2015:08:02:32 +0800] "POST / HTTP/1.1" 302 -
88112 222.186.52.91 - - [01/Jan/2015:08:03:03 +0800] "POST / HTTP/1.1" 200 32
88113 222.186.52.91 - - [01/Jan/2015:08:03:09 +0800] "POST / HTTP/1.1" 200 20002
88114 222.186.52.91 - - [01/Jan/2015:08:03:33 +0800] "POST / HTTP/1.1" 302 -
88116 222.186.52.91 - - [01/Jan/2015:08:03:45 +0800] "POST / HTTP/1.1" 200 20002
88117 222.186.52.91 - - [01/Jan/2015:08:03:50 +0800] "POST / HTTP/1.1" 200 20002
88119 222.186.52.91 - - [01/Jan/2015:08:04:23 +0800] "POST / HTTP/1.1" 200 20002
88120 222.186.52.91 - - [01/Jan/2015:08:04:44 +0800] "POST / HTTP/1.1" 200 20002
88121 222.186.52.91 - - [01/Jan/2015:08:04:44 +0800] "POST / HTTP/1.1" 200 20002
88122 222.186.52.91 - - [01/Jan/2015:08:04:47 +0800] "POST / HTTP/1.1" 200 20002
88123 222.186.52.91 - - [01/Jan/2015:08:05:03 +0800] "POST / HTTP/1.1" 200 20002
88124 222.186.52.91 - - [01/Jan/2015:08:05:22 +0800] "POST / HTTP/1.1" 200 20002
88200 222.186.52.91 - - [01/Jan/2015:10:01:29 +0800] "POST / HTTP/1.1" 200 32
88201 222.186.52.91 - - [01/Jan/2015:10:01:34 +0800] "POST / HTTP/1.1" 302 -
88204 222.186.52.91 - - [01/Jan/2015:10:02:11 +0800] "POST / HTTP/1.1" 200 20002
88205 222.186.52.91 - - [01/Jan/2015:10:02:42 +0800] "POST / HTTP/1.1" 200 20002
88207 222.186.52.91 - - [01/Jan/2015:10:02:53 +0800] "POST / HTTP/1.1" 200 20002
88208 222.186.52.91 - - [01/Jan/2015:10:02:55 +0800] "POST / HTTP/1.1" 200 20002
88209 222.186.52.91 - - [01/Jan/2015:10:03:06 +0800] "POST / HTTP/1.1" 200 20002
89187 117.87.10.206 - - [01/Jan/2015:23:55:25 +0800] "POST / HTTP/1.1" 200 20002
89401 222.186.52.91 - - [02/Jan/2015:03:21:21 +0800] "POST / HTTP/1.1" 200 20002
89402 222.186.52.91 - - [02/Jan/2015:03:22:22 +0800] "POST / HTTP/1.1" 302 -
89403 222.186.52.91 - - [02/Jan/2015:03:22:33 +0800] "POST / HTTP/1.1" 200 20002
91519 222.186.52.91 - - [03/Jan/2015:07:30:36 +0800] "POST / HTTP/1.1" 200 20002
91520 222.186.52.91 - - [03/Jan/2015:07:31:00 +0800] "POST / HTTP/1.1" 200 32
91521 222.186.52.91 - - [03/Jan/2015:07:31:03 +0800] "POST / HTTP/1.1" 200 32
92658 222.186.52.91 - - [03/Jan/2015:19:49:00 +0800] "POST / HTTP/1.1" 200 20002
92659 222.186.31.196 - - [03/Jan/2015:19:49:20 +0800] "POST / HTTP/1.1" 200 32
92660 222.186.31.196 - - [03/Jan/2015:19:49:29 +0800] "POST / HTTP/1.1" 302 -
92662 222.186.52.91 - - [03/Jan/2015:19:49:42 +0800] "POST / HTTP/1.1" 200 20002
92663 222.186.31.196 - - [03/Jan/2015:19:49:51 +0800] "POST / HTTP/1.1" 200 20002
92664 222.186.31.196 - - [03/Jan/2015:19:50:36 +0800] "POST / HTTP/1.1" 200 20002
92665 222.186.31.196 - - [03/Jan/2015:19:50:44 +0800] "POST / HTTP/1.1" 200 20002
92693 222.186.52.91 - - [03/Jan/2015:19:52:03 +0800] "POST / HTTP/1.1" 200 20002
92694 222.186.31.196 - - [03/Jan/2015:19:51:58 +0800] "POST / HTTP/1.1" 200 20002
92695 222.186.52.91 - - [03/Jan/2015:19:52:18 +0800] "POST / HTTP/1.1" 200 20002
92696 222.186.31.196 - - [03/Jan/2015:19:52:19 +0800] "POST / HTTP/1.1" 200 20002
92697 222.186.52.91 - - [03/Jan/2015:19:52:23 +0800] "POST / HTTP/1.1" 200 20002
92698 222.186.52.91 - - [03/Jan/2015:19:52:23 +0800] "POST / HTTP/1.1" 200 20002
92699 222.186.52.91 - - [03/Jan/2015:19:52:24 +0800] "POST / HTTP/1.1" 200 20002
92700 222.186.31.196 - - [03/Jan/2015:19:52:29 +0800] "POST / HTTP/1.1" 200 20002
92706 222.186.52.91 - - [03/Jan/2015:20:01:18 +0800] "POST / HTTP/1.1" 200 20002
92707 222.186.52.95 - - [03/Jan/2015:20:01:28 +0800] "POST / HTTP/1.1" 200 32
92708 222.186.52.95 - - [03/Jan/2015:20:01:28 +0800] "POST / HTTP/1.1" 200 20002
92710 222.186.52.95 - - [03/Jan/2015:20:01:37 +0800] "POST / HTTP/1.1" 200 20002
92711 222.186.52.95 - - [03/Jan/2015:20:01:37 +0800] "POST / HTTP/1.1" 200 20002
92712 222.186.52.95 - - [03/Jan/2015:20:01:37 +0800] "POST / HTTP/1.1" 200 20002
92713 222.186.52.95 - - [03/Jan/2015:20:01:33 +0800] "POST / HTTP/1.1" 200 20002
92714 222.186.52.95 - - [03/Jan/2015:20:01:42 +0800] "POST / HTTP/1.1" 200 20002
92715 222.186.52.95 - - [03/Jan/2015:20:01:42 +0800] "POST / HTTP/1.1" 302 -
92717 222.186.52.95 - - [03/Jan/2015:20:01:43 +0800] "POST / HTTP/1.1" 302 -
92719 222.186.52.95 - - [03/Jan/2015:20:01:44 +0800] "POST / HTTP/1.1" 200 20002
92720 222.186.52.95 - - [03/Jan/2015:20:01:53 +0800] "POST / HTTP/1.1" 200 20002
92721 222.186.52.95 - - [03/Jan/2015:20:01:54 +0800] "POST / HTTP/1.1" 302 -
92724 222.186.52.95 - - [03/Jan/2015:20:01:54 +0800] "POST / HTTP/1.1" 200 20002
92725 222.186.52.95 - - [03/Jan/2015:20:01:59 +0800] "POST / HTTP/1.1" 200 20002
92726 222.186.52.95 - - [03/Jan/2015:20:01:59 +0800] "POST / HTTP/1.1" 302 -
92728 222.186.52.95 - - [03/Jan/2015:20:02:00 +0800] "POST / HTTP/1.1" 302 -
92730 222.186.52.95 - - [03/Jan/2015:20:01:44 +0800] "POST / HTTP/1.1" 200 20002
92731 222.186.52.95 - - [03/Jan/2015:20:01:55 +0800] "POST / HTTP/1.1" 200 20002
92732 222.186.52.95 - - [03/Jan/2015:20:01:49 +0800] "POST / HTTP/1.1" 200 20002
92733 222.186.52.95 - - [03/Jan/2015:20:01:29 +0800] "POST / HTTP/1.1" 500 536
92734 222.186.52.95 - - [03/Jan/2015:20:01:38 +0800] "POST / HTTP/1.1" 500 536
93531 222.186.52.91 - - [04/Jan/2015:07:59:51 +0800] "POST / HTTP/1.1" 200 20002
93533 222.186.52.91 - - [04/Jan/2015:08:00:34 +0800] "POST / HTTP/1.1" 200 20002
93534 222.186.52.91 - - [04/Jan/2015:08:00:58 +0800] "POST / HTTP/1.1" 200 20002
93535 222.186.52.91 - - [04/Jan/2015:08:01:30 +0800] "POST / HTTP/1.1" 200 20002
93536 222.186.52.91 - - [04/Jan/2015:08:01:50 +0800] "POST / HTTP/1.1" 200 20002
93537 222.186.52.91 - - [04/Jan/2015:08:01:51 +0800] "POST / HTTP/1.1" 200 20002
93539 222.186.52.91 - - [04/Jan/2015:08:03:18 +0800] "POST / HTTP/1.1" 200 20002
93540 222.186.52.91 - - [04/Jan/2015:08:03:29 +0800] "POST / HTTP/1.1" 200 20002
93541 222.186.52.91 - - [04/Jan/2015:08:04:03 +0800] "POST / HTTP/1.1" 200 20002
93544 222.186.52.91 - - [04/Jan/2015:08:07:12 +0800] "POST / HTTP/1.1" 302 -
93546 222.186.52.91 - - [04/Jan/2015:08:09:38 +0800] "POST / HTTP/1.1" 200 20002
93551 222.186.52.91 - - [04/Jan/2015:08:16:31 +0800] "POST / HTTP/1.1" 200 20002
93572 222.186.52.91 - - [04/Jan/2015:08:49:28 +0800] "POST / HTTP/1.1" 200 20002
95516 222.178.179.181 - - [04/Jan/2015:10:51:58 +0800] "POST / HTTP/1.1" 200 -
96039 222.178.179.181 - - [04/Jan/2015:11:03:47 +0800] "POST / HTTP/1.1" 200 -
96107 222.178.179.181 - - [04/Jan/2015:11:17:23 +0800] "POST / HTTP/1.1" 200 -
97274 222.178.179.181 - - [04/Jan/2015:14:24:21 +0800] "POST / HTTP/1.1" 200 -
101004 117.87.14.211 - - [04/Jan/2015:17:47:42 +0800] "POST / HTTP/1.1" 200 20002
101005 117.87.14.211 - - [04/Jan/2015:17:48:14 +0800] "POST / HTTP/1.1" 200 20002
101542 222.186.52.95 - - [04/Jan/2015:22:41:50 +0800] "POST / HTTP/1.1" 200 32
101543 222.186.52.95 - - [04/Jan/2015:22:41:51 +0800] "POST / HTTP/1.1" 302 -
101545 222.186.52.95 - - [04/Jan/2015:22:41:52 +0800] "POST / HTTP/1.1" 302 -
101565 222.186.52.95 - - [04/Jan/2015:22:54:49 +0800] "POST / HTTP/1.1" 200 32
101566 222.186.52.95 - - [04/Jan/2015:22:54:49 +0800] "POST / HTTP/1.1" 302 -
101568 222.186.52.95 - - [04/Jan/2015:22:54:50 +0800] "POST / HTTP/1.1" 302 -
102673 222.186.52.95 - - [05/Jan/2015:11:20:46 +0800] "POST / HTTP/1.1" 200 32
102674 222.186.52.95 - - [05/Jan/2015:11:20:46 +0800] "POST / HTTP/1.1" 302 -
102676 222.186.52.95 - - [05/Jan/2015:11:20:48 +0800] "POST / HTTP/1.1" 302 -
102691 222.186.52.95 - - [05/Jan/2015:11:28:20 +0800] "POST / HTTP/1.1" 200 32
102697 222.186.52.95 - - [05/Jan/2015:11:28:51 +0800] "POST / HTTP/1.1" 200 20002
102698 222.186.52.95 - - [05/Jan/2015:11:29:21 +0800] "POST / HTTP/1.1" 200 20002
102700 222.186.52.95 - - [05/Jan/2015:11:29:36 +0800] "POST / HTTP/1.1" 200 20002
102701 222.186.52.95 - - [05/Jan/2015:11:29:45 +0800] "POST / HTTP/1.1" 200 20002
102717 222.186.52.95 - - [05/Jan/2015:11:53:44 +0800] "POST / HTTP/1.1" 200 32
102718 222.186.52.95 - - [05/Jan/2015:11:53:44 +0800] "POST / HTTP/1.1" 302 -
102720 222.186.52.95 - - [05/Jan/2015:11:53:45 +0800] "POST / HTTP/1.1" 302 -
102739 222.186.52.95 - - [05/Jan/2015:12:15:29 +0800] "POST / HTTP/1.1" 200 32
102740 222.186.52.95 - - [05/Jan/2015:12:15:29 +0800] "POST / HTTP/1.1" 302 -
102742 222.186.52.95 - - [05/Jan/2015:12:15:30 +0800] "POST / HTTP/1.1" 302 -
102929 222.178.179.181 - - [05/Jan/2015:13:46:13 +0800] "POST / HTTP/1.1" 200 -
apache上异常的post 日志。。 tomcat日志 及 apache日志 请看附件
1.zip
(2.51 MB, 下载次数: 13)
新手小白 对完全也不了解 希望有大神能提供这方面的知识。。 或者说指点 或者说怎么进一步追查源 先谢谢了
|
|
免费注册
发表于 2015-01-05 16:00