apache访问记录太多访问条目

Posted 2023-02-24

【中文标题】apache访问记录太多访问条目

【英文标题】：apache access logs too many access entry

【发布时间】：2022-01-23 14:40:10

【问题描述】：

我检查了 access_log '/var/log/virtualmin/example.com_access_log' 我发现下面有数千行（每秒 15-20 个请求）

请指导我解决这个问题

access_log 条目：

106.85.76.233 - - [22/Dec/2021:11:46:54 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
111.41.19.48 - - [22/Dec/2021:11:46:54 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
182.118.236.117 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
220.249.144.67 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
115.49.58.17 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
180.175.194.184 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
120.231.206.74 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
122.96.46.45 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
223.153.5.236 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
223.104.95.33 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
14.116.38.17 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
49.73.248.176 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
112.3.89.82 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
61.140.176.228 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
117.61.30.163 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
36.6.223.248 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
122.96.32.41 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
112.53.236.204 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
39.170.224.90 - - [22/Dec/2021:11:46:55 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"
106.114.45.168 - - [22/Dec/2021:11:46:56 +0100] "GET /my-isp-provider/ HTTP/1.1" 200 5683 "-" "Go-http-client/1.1"

【问题讨论】：

我投票结束这个问题，因为它与编程无关，并且作为网络服务器的运营商，对于到达您的服务器的未经请求的请求您无能为力（除了用其中一个大的屏蔽它提供者会在它们到达您的服务器之前对其进行过滤）。欢迎来到互联网。每个人的服务器都会不断被索引、扫描，以查找可能安装的软件、它们的版本和可能的漏洞。这里没什么可看的。

【参考方案1】：

通常“Go-http-client/1.1”（1）表示来自bot o爬虫的访问。

可能是 Google 将您的网站编入索引，但由于大多数 IP 来自中国，并且所有这些 IP 都要求相同的 URL，因此可能是骨扫描或 DoS 攻击。

https://user-agents.net/string/go-http-client-1-1