發現Web Site有許多奇怪的存取記錄,想要問一下,存取者想要做什麼?
一般正常的記錄像下面這樣
222.251.xxx.xxx - - [22/Mar/2014:03:51:01 +0800] "GET /Picture/image.jpg HTTP/1.1" 200 12280
"http://www.google.com/......"
"Mozilla/5.0 (Linux; U; Android 4.0.3; zh-tw; HTC_Desire_VC_T328d Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko)
Version/4.0 Mobile Safari/534.30"
可是今天卻發現一些奇怪的記錄(如下),數量只有二三十個,不太像DDOS,想問一下存取的的企圖
174.1.230.41 - - [22/Mar/2014:05:46:45 +0800]
"\xBB\x95\xBFco\xA8\x93" 400 172 "-" "-"
1.165.2.185 - - [22/Mar/2014:08:34:52 +0800]
"\x1BH\xC8\xF5~\xA7,\xA8G\xAD\xF29j=\xE6\x06\xCCy\x89\xCB\x1ET\xD0]" 400 172 "-" "-"
68.99.239.91 - - [22/Mar/2014:08:34:53 +0800]
"\xD5*\xC5oN)\xBC\xDD6\xAF\x93\xCC\x8A\xF5\xD4~\xDE6\x96?\x1D\xEB&\xD7@hEVK{" 400 172 "-" "-"
74.88.102.250 - - [22/Mar/2014:09:11:42 +0800]
"^\xF6\xB3\xC5\x98}^K\xAD\xE0\x09#\x16\xF2\xDBL\xAE\xEA\xF3V\xF5\x1E\x5CN@
\xFF\x94\xE9\xD9\xD1$\x1A\x9E\x9DW\x08y\xF49_\x89\xFDN\xBB\xF9\x8C\xA5" 400 172 "-" "-"
如果是在access.log裡
你web資料應該有中文的檔名或路徑吧
那是編碼的問題