早几天注册了一个域名, 查询搜索,没有任何记录,当天就把域名上线了, 这几天观察日志发现该域名平均以每分钟二到三条的速度被请求同一个页面mh.php, 全部来自国外IPs,从请求参数看似乎是某个系统的用户登陆资料,最后一个参数应该是某个数据的md5值,不知道为什么会出现这个情况?
219.212.206.48 - - [07/Jul/2006:21:18:37 +0800] "GET /mh.php?uid=Eminem_475169987&key=ff1e794b46bcd80497928a0da57ce029 HTTP/1.0" 403 - "-" "-"
85.15.201.211 - - [07/Jul/2006:21:19:13 +0800] "GET /mh.php?uid=KULITIS_-1467762506&key=b70171073a65d8e8a63d106149c5a1f6 HTTP/1.0" 403 - "-" "-"
213.163.39.242 - - [07/Jul/2006:21:22:11 +0800] "GET /mh.php?uid=dlaci_-1538364308&key=a06a11e601105419d2cc137810c1cec1 HTTP/1.0" 403 - "-" "-"
81.205.206.167 - - [07/Jul/2006:21:22:40 +0800] "GET /mh.php?uid=PC_Ezra_-455952143&key=ce7e505f03972c763ed8fe01c485267c HTTP/1.0" 403 - "-" "-"
82.35.216.13 - - [07/Jul/2006:21:23:23 +0800] "GET /mh.php?uid=bigdaddy_743637841&key=515c27751d2b2b79772314de88b1e30b HTTP/1.0" 403 - "-" "-"
83.18.165.18 - - [07/Jul/2006:21:24:36 +0800] "GET /mh.php?uid=rty-kdwv6fa2dog_1885351239&key=65361f5ed9ba15173bf928abbf4f9d6e HTTP/1.0" 403 - "-" "-"
217.24.113.222 - - [07/Jul/2006:21:26:25 +0800] "GET /mh.php?uid=buh01_754831315&key=f3183e09139dd508b3234f9f1dd09da7 HTTP/1.0" 403 - "-" "-"
81.210.104.10 - - [07/Jul/2006:21:26:46 +0800] "GET /mh.php?uid=loko-8y3glacnbl_939658037&key=1b2432b7520a6d3036ece7815b3c5e22 HTTP/1.0" 403 - "-" "-" |