当前位置:编程学习 > 网站相关 >>

服务器80端口被恶意流量拥塞,怎么解决?

大家好,下面这种问题怎么解决?iis日志里面出现下面这种情况,我觉得可能是服务器中了恶意流量拥塞的毒了,导致网站访问很慢,cpu占用情况正常,低于5%。内存使用也正常。日志中显示,总是持续访问某个根本不存在的文件,现在根本就没有local这个目录存在,并且客户端ip地址总换。

以前某些网站文件没有设置成只读,总是被篡改网站文件,后来用备份的文件还原后,都弄成只读的,才解决了被篡改文件的问题,但是从外部访问网站的速度很慢,用360杀毒杀不出来。以下是部分日志,这样的日志很多:

2012-03-18 00:53:14 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 110.232.37.208 Mozilla/4.0+(compatible;+MSIE+5.00;+Windows+98) 404 0 3
2012-03-18 00:53:14 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 110.232.37.208 Mozilla/4.0+(compatible;+MSIE+5.00;+Windows+98) 404 0 3
2012-03-18 00:53:14 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 110.232.37.208 Mozilla/4.0+(compatible;+MSIE+5.00;+Windows+98) 404 0 3
2012-03-18 00:53:14 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 110.232.37.208 Mozilla/4.0+(compatible;+MSIE+5.00;+Windows+98) 404 0 3

2012-03-18 03:32:58 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:32:59 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:01 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:02 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:04 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:04 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:07 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:07 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:10 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:10 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:13 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:14 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:16 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:17 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:19 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:20 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:22 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:23 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:25 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3
2012-03-18 03:33:26 W3SVC1 192.168.0.5 GET /local/ccxx/oa/fileManage/16000032/2007-2/7-200727114819_0.mp3 - 80 - 114.250.179.181 NSPlayer/9.0.0.4509+WMFSDK/9.0 404 0 3 --------------------编程问答-------------------- 要不你试试把WWW服务从80改成别的端口那? --------------------编程问答-------------------- 这是个互联网时代,网站安全防御已经很有必要了。专业的事交给专业的人,以上问题完美解决。想了解相关情况的可以和我聊聊。 --------------------编程问答-------------------- --------------------编程问答-------------------- --------------------编程问答-------------------- 还是用硬件防火墙吧。 --------------------编程问答--------------------     这应该是DOS攻击吧.用验证码似乎也只能解决蛮力试探登录的. --------------------编程问答-------------------- 你这个肯定是被攻击,首先请求的文件是同一个,来源地址是同一个,可以用防火墙来阻挡,比如,10秒内同一个地方请求同一资源就给拒绝他的请求10分钟. --------------------编程问答-------------------- 回答没说完整,郁闷:
比如,10秒内同一个地方请求同一资源超过20次就拒绝他的请求10分钟. --------------------编程问答--------------------
补充:云计算 ,  云安全
CopyRight © 2022 站长资源库 编程知识问答 zzzyk.com All Rights Reserved
部分文章来自网络,