![奇怪的 Apache Access 日志](https://linux22.com/image/525248/%E5%A5%87%E6%80%AA%E7%9A%84%20Apache%20Access%20%E6%97%A5%E5%BF%97.png)
这是我的网站 rishavrastogi.com 的当前访问日志
196.201.39.98 - - [23/Sep/2010:12:08:16 +0000] "POST http://www.tagged.com/api/?application_id=user&format=json&session_token=c85rqoo30bqrc7jnpdmlp57d83 HTTP/1.1" 200 472 "http://www.tagged.com/profile.html?view=mini&uid=5411562347" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6" 41.218.239.57 - - [23/Sep/2010:12:08:16 +0000] "GET http://c5.zedo.com/ads5/d/3609/172/496/111/109/i.js?z=0750 HTTP/1.1" 200 2426 "http://c5.zedo.com/jsc/c5/ff2.html?n=496;c=111/109;s=1;d=14;w=728;h=90;p=1001;q=messages&t=1826" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010031422 AskTbBT5/3.8.0.12304 Firefox/3.0.19” 96.31.68.38 - - [23/Sep/2010:12:08:16 +0000] "GET http://ad.yieldmanager.com/imp?Z=728x90&s=734666&_salt=5712275195&B=12&m=2&u=http%3A%2F%2Fwww.alltubedl.com%2F&r=0 HTTP/1.1" 302 - "http://ad.reachjunction.com/st?ad_type=iframe&ad_size=728x90§ion=734666" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.7) Gecko/20100713 Firefox/3.6.7 (.NET CLR 3.5.30729)" 109.86.209.238 - - [23/Sep/2010:12:08:15 +0000] "POST http://my.mail.ru/cgi-bin/my/ajax?ajax_call=1&func_name=perl_photo_for_vote HTTP/1.1" 200 1388 "-" "Opera/9.25 (Windows NT 5.1; U; ru)" 80.87.81.150 - - [23/Sep/2010:12:08:16 +0000] “获取 http://b.scorecardresearch.com/b?c1=2&c2=3000023&rn=0.0978174457108752&c7=http%3A%2F%2Fdownload.cnet.com%2F1770-20_4-0.html%3Fquery%3Dhp%2Bcolor%2Blaserjet%2B4650%2Bdrivers%26tag%3Dsrch%26searchtype%3Ddownloads%26filterName%3Dplatform%253DWindows%252CWebwa re%26filter%3Dplatform%253DWindows%252CWebware&c3=&c4=&c5=&c6=&c10=&c15=&c16=&c8=hp%20color%20laserjet%204650%20drivers%20downloads%20-%20Free%20software%20downloads%20and%20software%20reviews%20-%20CNET&c9=http%3A%2F%2Fdownload.cnet.com%2Fwindows%2F&cv=1.8 HTTP/1.1” 204 - “http://download.cnet.com/1770-20_4-0.html?query=hp+color+laserjet+4650+drivers&tag=srch&searchtype=downloads&filterName=platform%3DWindows%2CWebware&filter=platform%3DWindows%2CWebware” “Mozilla/4.0 (兼容;MSIE 8.0;Windows NT 6.0;Trident/4.0;GTB6.5;SLCC1;.NET CLR 2.0.50727;.NET4.0C;.NET4.0E;InfoPath.3;.NET CLR 3.5.30729;.NET CLR 3.0.30729;AskTB5.6)” 41.218.239.57 - - [23/Sep/2010:12:08:16 +0000] "获取 http://l5.zedo.com/log/p.gif?a=276291;;r=1;x=1817;g=172,0;c=496000111,496000111;i=21;n=496;q=74;i=67;u=odGRtgoBADYAACZsGtMAAAHP~080310;1=5;2=1;e=i;s=1;g=172;w=6;m=502;q=messages%26t;z=0.144442904864648060.2285379657722636 HTTP/1.1" 200 43 “http://c5.zedo.com/jsc/c5/ff2.html?n=496;c=111/109;s=1;d=7;w=160;h=600;p=1001;q=messages&t=1826” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010031422 AskTbBT5/3.8.0.12304 Firefox/3.0.19” 210.51.24.171 - - [23/Sep/2010:12:08:16 +0000] “GET http://servedby.adxpose.com/adxpose/find_ad.js HTTP/1.0” 200 1179 “http://www.smartertravel.com” “mozilla/4.0 (兼容;msie 6.0;windows nt 5.1)” 195.248.234.33 - - [23/Sep/2010:12:08:16 +0000] "GET http://webcache.googleusercontent.com/search?hl=en&q=cache%3Awww.gismps.ru%2Fcontent%2Fview%2F47%2F43%2F HTTP/1.1" 200 28502 "http://www.google.com/" "Mozilla/4.0 (兼容; MSIE 6.0; Windows NT 5.1; SV1; MyIE2; MRA 4.8 (build 01709); .NET CLR 1.1.4322; InfoPath.1)" 173.224.218.97 - - [23/Sep/2010:12:08:16 +0000] “GET http://www.mothering.com/discussions/image.php?type=hv&hash=e1799ea01f0e33be396911208b60b5c8 HTTP/1.0” 200 18619 “http://www.mothering.com/discussions/register.php?s=86a3b445505cba446c020f241927bdc9” “Mozilla/4.0 (兼容; MSIE 6.0; Windows NT 5.1) Opera 7.54 [en]” 41.218.239.57 - - [23/Sep/2010:12:08:17 +0000] “获取 http://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6547074035899916&format=160x600_as&output=html&h=600&w=160&channel=9224992124&ad_type=text_image&ea=0&alternate_ad_url=http%3A%2F%2Fwww. tagged.com%2Fad_redirect_160.html&cust_age=1001&cust_gender=2&flash=10.0.45&url=http%3A%2F%2Fwww.tagged.com%2Fmessages.html%3FmsgId%3D172502289400064038%26ft%3D1%26ect%3D3wdnu58i%26al%3D1%26fid%3D F318F0FDD1CC746D%26tn%3DbWVzc2FnZXNfbmV3LTEtMy0x%26linkId%3Dmessage_link_0&dt=1285227664939&shv=r20100909&jsv=r20100917&correlator=1285227664944&frm=1&adk=1240161899&ga_vid=1789046811.1285227665&g a_sid=1285227665&ga_hid=1991724694&ga_fc=0&u_tz=270&u_his=1&u_java=0&u_h=768&u_w=1024&u_ah=738&u_aw=1024&u_cd=32&u_nplug=18&u_nmime=110&biw=-12245933&bih=-12245933&ifk=2364570421&fu=0&ifi=1&dtd=87 HTTP/1.1” 200 1264 “http://c5.zedo.com/jsc/c5/ff2.html?n=496;c=111/109;s=1;d=7;w=160;h=600;p=1001;q=messages&t=1826” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19) Gecko/2010031422 AskTbBT5/3.8.0.12304 Firefox/3.0.19” 196.201.39.98 - - [23/Sep/2010:12:08:17 +0000] “获取 http://www.facebook.com/extern/login_status.php?api_key=123049054388972&display=hidden&extern=2&locale=en_US&method=auth.status&next=http%3A%2F%2Fwww.tagged.com%2Fprofile.html%3Fview%3Dmini%26uid%3D10651379%26fb_xd_fragment%23%3F%3D%26cb%3Df2f495d 99aadbc%26relation%3Dopener%26transport%3Dfragment%26frame%3Df33d742667bde0c%26result%3D%2522xxRESULTTOKENxx%2522&no_session=http%3A%2F%2Fwww.tagged.com%2Fprofile.html%3Fview%3Dmini%26uid%3D10651379%26fb_xd_fragment%23%3F%3D%26cb%3Df4dfbb0b484aa%26关系%3D父%26运输%3D片段%26frame%3Df33d742667bde0c&no_user=http%3A%2F%2Fwww.tagged.com%2Fprofile.html%3Fview%3Dmini%26uid%3D10651379%26fb_xd_fragment%23%3F%3D%26cb%3Df2ba4a89a3eca84%26关系%3D父%26运输%3D片段%26frame %3Df33d742667bde0c&ok_session=http%3A%2F%2Fwww.tagged.com%2Fprofile.html%3Fview%3Dmini%26uid%3D10651379%26fb_xd_fragment%23%3F%3D%26cb%3Df1de62e7f210464%26relation%3Dparent%26transport%3Dfragment%26frame%3Df33d742667bde0c&sdk=joey&session_version=3 HTTP/1.1" 302 20 "http://www.tagged.com/profile.html?view=mini&uid=10651379" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.6)Gecko/20070725 Firefox/2.0.0.6” 41.218.239.57 - - [23/Sep/2010:12:08:17 +0000] “获取 http://c5.zedo.com/ads5/d/2329/172/496/111/109/i.js?z=0750 HTTP/1.1” 200 1852 “http://c5
我不明白发生这种情况的原因是什么以及我该如何阻止这种情况?
我已修复,我的服务器不再是开放代理。但我仍然收到此类请求。我关闭了 ProxyRequests 并确保其安全。现在所有此类请求都不断收到 404 或 200 标准“It Works”Apache 响应。我如何才能停止这些请求?
答案1
这些看起来像是试图利用 mod_proxy 来访问网络的其他部分。错误配置的 mod_proxy 配置会使 Web 服务器成为开放代理,这对于试图假装自己不是来自实际所在位置的人来说非常有用。我不能确定,但在我看来确实是这样的。
Apache mod_proxy 文档,有关访问控制: