本帖最后由 Robin81 于 2024-6-12 13:46 编辑
关于
[Mon Jun 10 21:04:19.790472 2024] [core:notice] [pid 475:tid 139674310814656] AH00052: child pid 43385 exit signal Segmentation fault (11)
这个日志,
我发现一般出现这个的时候,在它上面都会有这个种类似的日志:
[Mon Jun 10 14:58:58.337439 2024] [autoindex:error] [pid 36563:tid 139673821185792] [client 36.99.136.136:61753] AH01276: Cannot serve directory /www/server/phpmyadmin/: No matching DirectoryIndex (index.php,index.html,index.htm,default.php,default.html,default.htm) found, and server-generated directory index forbidden by Options directive
或者这种:
[Mon Jun 10 15:32:14.428222 2024] [core:error] [pid 40134:tid 139672932050688] [client 43.153.211.91:46792] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh)
应该是被什么程序扫描了吧?一般出现这种后,后面就会有许多条,类似于这个的日志:
[Mon Jun 10 15:33:22.612484 2024] [core:notice] [pid 475:tid 139674310814656] AH00052: child pid 35657 exit signal Segmentation fault (11)
直到出现
[Mon Jun 10 16:59:59.329373 2024] [mpm_event:warn] [pid 475:tid 139674310814656] AH10392: children 被停止了 successively!
然后就停止了。(上面的被停止了的英文写出来会发不出来)
我怀疑是不是因为这种扫描日志的出现导致的?我应该做些什么防护吗?
|