frozenway
V2EX  ›  问与答

发现服务器被人不停的发送很奇怪的请求,请问这些请求是不是木马?

  •  
  •   frozenway · Dec 9, 2019 · 2420 views
    This topic created in 2361 days ago, the information mentioned may be changed or developed.

    这个是 nginx 日记里复制出来的,有大神帮我一下吗?

    117.87.37.27 - - [09/Dec/2019:10:06:08 +0800] "RTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICR" 414 193 "-" "-"
    
    8 replies    2019-12-09 10:56:06 +08:00
    frozenway
        1
    frozenway  
    OP
       Dec 9, 2019
    感觉这样下去,即使不中毒,磁盘也快要爆炸了。呜呜呜
    imdong
        2
    imdong  
       Dec 9, 2019
    看起来就是故意压榨你的,都 414 了...
    Chalice
        3
    Chalice  
       Dec 9, 2019
    拉黑这个 IP 吧,僵尸网络的肉鸡
    opengps
        4
    opengps  
       Dec 9, 2019
    这内容显然不是被人发送,而是被机器人发送,拉黑 ip 换清闲
    frozenway
        5
    frozenway  
    OP
       Dec 9, 2019
    @imdong 是的,414 是请求内容太长吧?
    manami
        6
    manami  
       Dec 9, 2019
    Fail2ban
    frozenway
        7
    frozenway  
    OP
       Dec 9, 2019
    @Chalice @opengps 好的
    q428202849
        8
    q428202849  
       Dec 9, 2019
    被攻击了
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   3841 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 45ms · UTC 00:48 · PVG 08:48 · LAX 17:48 · JFK 20:48
    ♥ Do have faith in what you're doing.