帮我看看防火墙日志，是不是被攻击了

下面是其中一部分    什么情况 ？ 我为什么会有www.bt.cn这个域名的防御日志？




117.136.138.53 [2017-08-22 11:51:45] "GET www.bt.cn/cgi-bin/story.pl?next=../../../../../etc/passwd%00" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:45] "GET www.bt.cn/cgi-bin/story/story.pl ... ../../etc/passwd%00" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:45] "GET www.bt.cn/scripts/story.pl?next=../../../../../etc/passwd%00" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:45] "GET www.bt.cn/scripts/story/story.pl ... ../../etc/passwd%00" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:48] "GET www.bt.cn/cgi-bin/shopper.cgi?ne ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:48] "GET www.bt.cn/cgi-bin/powerup/r.cgi? ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/scripts/shopper.cgi?ne ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/cgi_bin/powerup/r.cgi? ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/cgi-bin/r.cgi?FILE=../ ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/scripts/r.cgi?FILE=../ ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/cgi-bin/loadpage.cgi?u ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"
117.136.138.53 [2017-08-22 11:51:49] "GET www.bt.cn/scripts/loadpage.cgi?u ... ../../../etc/passwd" "-"  "Mozilla/4.75 [en] (X11, U; Rsas)" "\.\./"

宝塔的安全功能尤其是防火墙功能（尤其是防CC攻击功能）基本可以说是鸡肋没啥用的
直接安装云锁或者悬镜就行了

可以直接屏蔽掉117.136.138.53这个IP了