Apache   访问日志有很多别的网站地址,并不是？？

webeasymail

UID: 40449
帖子: 173
积分: 397
在线时间: 1 天 17 小时

1^# webeasymail 发表于 2009-01-05 17:00

Apache   访问日志有很多别的网站地址,并不是？？

Apache的配置如下：
HTML code

SetEnvIf Remote_Addr "127\.0\.0\.1" dontlog SetEnvIf Request_URI "^/favicon.ico$" dontlog SetEnvIf Request_URI "^/images/.*$" dontlog SetEnvIf Request_URI "^/.*\.js$" dontlog SetEnvIf Request_URI "^/.*\.css$" dontlog SetEnvIf Request_URI "^/.*\.dwr$" dontlog #~~~~~~~~~~~~~~~~~~~~~~~~~~~~VirtualHost~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NameVirtualHost 192.168.1.103:80 <VirtualHost 192.168.1.103:80> ProxyRequests On DocumentRoot /opt/project ServerName 192.168.1.103 DirectoryIndex index.jsp RewriteEngine On RewriteRule ^(http|https)://.* - [F] ProxyPass /pic/ http://192.168.1.101/ ProxyPass /report/ http://192.168.1.101:8081/report/ ProxyPass / balancer://proxy/ stickysession=JSESSIONID <Proxy balancer://proxy> BalancerMember ajp://192.168.1.103:10003/ route=A loadfactor=1 BalancerMember ajp://192.168.1.103:20003/ route=B loadfactor=1 BalancerMember ajp://192.168.1.101:10003/ route=C loadfactor=1 BalancerMember ajp://192.168.1.101:20003/ route=D loadfactor=1 </Proxy> ErrorLog logs/error_log.log CustomLog "|/usr/local/httpd/bin/rotatelogs /usr/local/httpd/logs/access_%Y_%m_%d.log 86400 480" combined env=!dontlog </VirtualHost>

访问日志：

122.121.24.234 - - [05/Jan/2009:16:40:11 +0800] "GET http://l06.member.mud.yahoo.com/config/isp_verify_user?l=doohs&p=123456 HTTP/1.0" 999 4707 "-" "-"
119.183.74.209 - - [05/Jan/2009:16:40:12 +0800] "GET http://www.baidu.com/s?ie=gb2312&bs=28&sr=&z=&cl=3&f=8&wd=28%208888110&ct=0 HTTP/1.0" 200 20175 "http://www.baidu.com/s?wd=28" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)"
70.65.128.67 - - [05/Jan/2009:16:40:11 +0800] "CONNECT 205.188.176.231:443 HTTP/1.0" 200 - "-" "-"
69.205.55.200 - - [05/Jan/2009:16:40:11 +0800] "GET http://202.86.5.49/config/pwtoken_get?login=wolffred&src=ygodgw&passwd=30b65ee49bc0a61a052e1824ba0f533d&challenge=rTf1gBnZW.Ijedk5fTgWHt8zhsjQ&md5=1 HTTP/1.0" 403 3296 "-" "MobileRunner-J2ME"
210.83.81.60 - - [05/Jan/2009:16:40:11 +0800] "GET http://www.1soccer.com/index.php/asia/detail/id/150033 HTTP/1.1" 200 27254 "-" "-"
70.65.128.67 - - [05/Jan/2009:16:40:10 +0800] "CONNECT 205.188.176.232:443 HTTP/1.0" 200 - "-" "-"
125.2.91.253 - - [05/Jan/2009:16:40:12 +0800] "GET http://www.tudou.com/playlist/id/4080522/ HTTP/1.1" 200 3921 "http://so.tudou.com/psearch/%E5%90%9B%E7%9F%A5%E3%82%8B%E3%82%84%E9%81%8B%E5%91%BD%E3%81%AE%E6%81%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
222.216.28.191 - - [05/Jan/2009:16:40:12 +0800] "GET http://cpro.baidu.com/cpro/ui/cp.js HTTP/1.0" 200 3637 "http://www.ccidcom.com/blog/?uid-130-action-viewspace-itemid-12415/" "Mozilla/4.0 (compatible; MSIE 5.5; AOL 6.0; Windows 95)"
210.83.81.60 - - [05/Jan/2009:16:40:12 +0800] "GET http://www.1soccer.com/index.php/asia/detail/id/175630 HTTP/1.1" 200 53286 "-" "-"
84.16.251.235 - - [05/Jan/2009:16:40:09 +0800] "POST http://dkunion.hp.infoseek.co.jp/cgi-bin/honey/honey.cgi HTTP/1.0" 404 253 "http://dkunion.hp.infoseek.co.jp/cgi-bin/honey/honey.cgi" "Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)"
210.83.81.60 - - [05/Jan/2009:16:40:12 +0800] "GET http://www.1soccer.com/index.php/odds/detail/id/175630 HTTP/1.1" 200 44064 "-" "-"
70.65.128.67 - - [05/Jan/2009:16:40:11 +0800] "CONNECT 205.188.176.232:443 HTTP/1.0" 200 - "-" "-"
124.154.100.192 - - [05/Jan/2009:16:40:12 +0800] "GET http://toriweb.net/deairanking/rl185/ranklink.cgi?ssd=3yGGajzp&id=gyasato HTTP/1.0" 302 279 "http://toriweb.net/deairanking/rl185/ranklink.cgi?id=gyasato" "-"

这里面的访问地址，没有一个是我的网站的，而且也很奇怪，有get、post、CONNECT 但是全部是别的网站的？？

parss

UID: 22105
帖子: 191
积分: 439
在线时间: 2 天 1 小时

2^# parss 发表于 2009-01-05 17:07

跨域,不奇怪

mrshelly

UID: 36004
帖子: 107
积分: 246
在线时间: 15 小时

3^# mrshelly 发表于 2009-01-05 17:42

被人当代理了.....

ccs02287

UID: 37984
帖子: 112
积分: 257
在线时间: 17 小时

4^# ccs02287 发表于 2009-01-05 18:49

引用 2 楼 mrshelly 的回复:
被人当代理了.....

UP

stars981

UID: 13566
帖子: 2
积分: 4
在线时间: 10 分钟

5^# stars981 发表于 2009-01-06 09:26

up

webeasymail

UID: 40449
帖子: 173
积分: 397
在线时间: 1 天 17 小时

6^# webeasymail 发表于 2009-01-07 13:33

但是我需要一个解决方案，如果被被人当代理了，我应给如何配置apache，才能解决这个问题。

如果是跨域攻击（服务器正在遭受syn flood攻击）我该如何解决这个问题？

Apache &nbsp; 访问日志有很多别的网站地址,并不是？？

Apache &nbsp; 访问日志有很多别的网站地址,并不是？？

Apache 访问日志有很多别的网站地址,并不是？？

Apache 访问日志有很多别的网站地址,并不是？？