我在玩nginx日志,我注意到一些奇怪的事情,特别是yahoo.com以及internet-measurement.com请求正在生成此
....
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/:80/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
[01/Dec/2023:15:08:54 +0000] - 502 502 - GET xyz "/" [Client 34.231.60.151] [Length 556] [Gzip -] [Sent-to 192.168.1.52/] "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" "http://www.yahoo.com"
字符串
有没有一种方法可以避免这种行为,要么拒绝它们,要么至少从日志中删除它?
1条答案
按热度按时间jm2pwxwz1#
因此,显然访问我的域根网址直接导致“301永久移动”,并重定向到同一个根网址,这证明了一个递归。
字符串