V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
frozenway
V2EX  ›  问与答

发现服务器被人不停的发送很奇怪的请求,请问这些请求是不是木马?

  •  
  •   frozenway · 2019-12-09 10:15:45 +08:00 · 2000 次点击
    这是一个创建于 1822 天前的主题,其中的信息可能已经有所发展或是发生改变。

    这个是 nginx 日记里复制出来的,有大神帮我一下吗?

    117.87.37.27 - - [09/Dec/2019:10:06:08 +0800] "RTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICRTIFICR" 414 193 "-" "-"
    
    8 条回复    2019-12-09 10:56:06 +08:00
    frozenway
        1
    frozenway  
    OP
       2019-12-09 10:18:23 +08:00
    感觉这样下去,即使不中毒,磁盘也快要爆炸了。呜呜呜
    imdong
        2
    imdong  
       2019-12-09 10:21:27 +08:00
    看起来就是故意压榨你的,都 414 了...
    Chalice
        3
    Chalice  
       2019-12-09 10:37:21 +08:00
    拉黑这个 IP 吧,僵尸网络的肉鸡
    opengps
        4
    opengps  
       2019-12-09 10:39:46 +08:00
    这内容显然不是被人发送,而是被机器人发送,拉黑 ip 换清闲
    frozenway
        5
    frozenway  
    OP
       2019-12-09 10:41:53 +08:00
    @imdong 是的,414 是请求内容太长吧?
    manami
        6
    manami  
       2019-12-09 10:42:14 +08:00
    Fail2ban
    frozenway
        7
    frozenway  
    OP
       2019-12-09 10:42:18 +08:00
    @Chalice @opengps 好的
    q428202849
        8
    q428202849  
       2019-12-09 10:56:06 +08:00
    被攻击了
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   1087 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 29ms · UTC 19:08 · PVG 03:08 · LAX 11:08 · JFK 14:08
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.