鐵之狂傲

標題: 個人網站被攻擊該如何應對呢? [列印本頁]
作者: 璇-Rabbit    時間: 08-6-3 16:21
標題: 個人網站被攻擊該如何應對呢?
兔有個個人網頁~並非是部落格

好像從今天早上開始就不斷斷續續的被連續點閱

使得兔的備用來客統計器一直故障

然後首頁開很慢

兔故障的來客統計有IP紀錄功能~可以紀錄最新30筆(如下

http://web.nhu.edu.tw:81/counter/index.php?id=cat123455

才因此知道被同一個IP狂點

如下...


272008-06-03 16:02:58163.26.36.56
262008-06-03 16:02:42163.26.36.56
252008-06-03 16:02:34163.26.36.56
242008-06-03 16:02:26163.26.36.56
232008-06-03 16:02:08163.26.36.56
222008-06-03 16:01:12163.26.36.56
212008-06-03 16:01:10163.26.36.56
202008-06-03 16:01:10163.26.36.56
192008-06-03 16:00:54163.26.36.56
182008-06-03 16:00:50163.26.36.56
172008-06-03 16:00:50163.26.36.56
162008-06-03 16:00:49163.26.36.56
152008-06-03 16:00:49163.26.36.56
142008-06-03 16:00:21163.26.36.56
132008-06-03 16:00:19163.26.36.56
122008-06-03 16:00:19163.26.36.56
112008-06-03 16:00:16163.26.36.56
102008-06-03 16:00:15163.26.36.56
92008-06-03 16:00:13163.26.36.56
82008-06-03 16:00:13163.26.36.56
72008-06-03 16:00:11163.26.36.56
62008-06-03 16:00:09163.26.36.56
52008-06-03 16:00:08163.26.36.56
42008-06-03 16:00:06163.26.36.56
32008-06-03 15:59:57163.26.36.56
22008-06-03 15:59:51163.26.36.56
12008-06-03 15:59:38163.26.36.56



然後他又很奇怪...兔一上網站他就會停止連點

就是一紀錄了兔的IP之後連點的那個IP就會停止

302008-06-03 16:16:14163.29.100.199<訪客
292008-06-03 16:15:54163.29.100.199<訪客
282008-06-03 16:08:00218.160.201.65<兔
272008-06-03 16:07:16218.160.201.65<兔
262008-06-03 16:03:10218.160.201.65<兔
252008-06-03 16:02:58163.26.36.56<以下都是連點者
242008-06-03 16:02:42163.26.36.56
232008-06-03 16:02:34163.26.36.56
222008-06-03 16:02:26163.26.36.56
212008-06-03 16:02:08163.26.36.56
202008-06-03 16:01:12163.26.36.56
192008-06-03 16:01:10163.26.36.56
182008-06-03 16:01:10163.26.36.56
172008-06-03 16:00:54163.26.36.56
162008-06-03 16:00:50163.26.36.56
152008-06-03 16:00:50163.26.36.56
142008-06-03 16:00:49163.26.36.56
132008-06-03 16:00:49163.26.36.56
122008-06-03 16:00:21163.26.36.56
112008-06-03 16:00:19163.26.36.56
102008-06-03 16:00:19163.26.36.56
92008-06-03 16:00:16163.26.36.56
82008-06-03 16:00:15163.26.36.56
72008-06-03 16:00:13163.26.36.56
62008-06-03 16:00:13163.26.36.56
52008-06-03 16:00:11163.26.36.56
42008-06-03 16:00:09163.26.36.56
32008-06-03 16:00:08163.26.36.56
22008-06-03 16:00:06163.26.36.56
12008-06-03 15:59:57163.26.36.56



這樣聽說久了網站可能會癱瘓QQ

該如何處理呢?

兔的網站是HINET的

不懂怎麼封鎖IP或是阻擋連續點閱的IP

又不想網頁搬家遷移QQ

所以想請教這問題是怎麼發生的呢?

有可能被人入侵放毒嗎?

對其他訪客又有怎樣的影響呢?

朋友說可能是DDoS~可是看了解決方法QQ

好像沒有兔可以做的事情QQ

而且兔覺得不像...因為攻擊的並沒有很快QQ

聽說真正的攻擊是那種每秒幾萬次的@@


舒緩DDoS攻擊的方式
方式  加大頻寬DDoS Migration服務 部署IPS加上L4交換器 內建防阻DDoS模組的網路流量加速設備 提升伺服器連線處理效能
提供廠商ISP業者 ISP業者 網路設備廠商 F5、Citrix、 Radware等 伺服器廠商
優點I SP可彈性加大頻寬，較有效  企業用戶不用花錢買高階設備 可以降低伺服器被塞爆的機會，主動封鎖可疑IP透過降流方式保護後端的伺服主機  提升Session連線處理速度，效果同加大頻寬
缺點事件處理時間較費時 是一種不能間斷的投資IPS設備貴，L4交換器需求數量多時，成本也高設備費用較貴 伺服器是長期投資，  難做短期應變


[ 本文章最後由 璇-Rabbit 於 08-6-3 18:39 編輯 ]
作者: 璇-Rabbit    時間: 08-6-3 16:22
剛PO完文章又被攻擊了QQ

怎麼辦?

30 2008-06-03 16:24:19 122.118.48.214  
29 2008-06-03 16:24:19 122.118.48.214  
28 2008-06-03 16:24:09 122.118.48.214  
27 2008-06-03 16:24:01 122.118.48.214  
26 2008-06-03 16:24:01 122.118.48.214  
25 2008-06-03 16:23:59 122.118.48.214  
24 2008-06-03 16:23:59 122.118.48.214  
23 2008-06-03 16:23:56 122.118.48.214  
22 2008-06-03 16:23:55 122.118.48.214  
21 2008-06-03 16:23:30 122.118.48.214  
20 2008-06-03 16:21:46 122.118.48.214  
19 2008-06-03 16:21:45 122.118.48.214  
18 2008-06-03 16:21:03 122.118.48.214  
17 2008-06-03 16:21:02 122.118.48.214  
16 2008-06-03 16:21:01 122.118.48.214  
15 2008-06-03 16:21:00 122.118.48.214  
14 2008-06-03 16:21:00 122.118.48.214  
13 2008-06-03 16:20:59 122.118.48.214  
12 2008-06-03 16:20:57 122.118.48.214  
11 2008-06-03 16:20:46 122.118.48.214  
10 2008-06-03 16:20:37 122.118.48.214  
9 2008-06-03 16:20:32 122.118.48.214  
8 2008-06-03 16:20:26 122.118.48.214  
7 2008-06-03 16:20:22 122.118.48.214  
6 2008-06-03 16:20:20 122.118.48.214  
5 2008-06-03 16:20:20 122.118.48.214  
4 2008-06-03 16:20:20 122.118.48.214  
3 2008-06-03 16:20:11 122.118.48.214  
2 2008-06-03 16:20:11 122.118.48.214  
1 2008-06-03 16:16:14 163.29.100.199

看來IP又不一樣了QQ

302008-06-03 16:31:44163.20.242.105
292008-06-03 16:31:42163.20.242.105
282008-06-03 16:31:42163.20.242.105
272008-06-03 16:31:39163.20.242.105
262008-06-03 16:31:38163.20.242.105
252008-06-03 16:31:36163.20.242.105
242008-06-03 16:31:36163.20.242.105
232008-06-03 16:31:34163.20.242.105
222008-06-03 16:31:34163.20.242.105
212008-06-03 16:31:31163.20.242.105
202008-06-03 16:31:25163.20.242.105
192008-06-03 16:31:25163.20.242.105
182008-06-03 16:31:23163.20.242.105
172008-06-03 16:31:21163.20.242.105
162008-06-03 16:31:21163.20.242.105
152008-06-03 16:31:19163.20.242.105
142008-06-03 16:31:19163.20.242.105
132008-06-03 16:31:17163.20.242.105
122008-06-03 16:31:17163.20.242.105
112008-06-03 16:31:17163.20.242.105
102008-06-03 16:31:15163.20.242.105
92008-06-03 16:31:14163.20.242.105
82008-06-03 16:31:13163.20.242.105
72008-06-03 16:31:13163.20.242.105
62008-06-03 16:31:11163.20.242.105
52008-06-03 16:31:11163.20.242.105
42008-06-03 16:31:09163.20.242.105
32008-06-03 16:31:09163.20.242.105
22008-06-03 16:31:09163.20.242.105
12008-06-03 16:31:09163.20.242.105

很討厭~不想紀錄了QQ

[ 本文章最後由 璇-Rabbit 於 08-6-3 16:54 編輯 ]
作者: 璇-Rabbit    時間: 08-6-3 18:38
問題解決了QQ

兔傳了網站原始檔給朋友修改~

把奇怪的連結去掉了QQ

為什麼會被放奇妙的連結兔也不清楚

總之有時候網站不好好管理檢查就會這樣倒楣QQ
作者: AQ    時間: 08-6-6 12:05
原帖由 璇-Rabbit 於 08-6-3 18:38 發表
問題解決了QQ

兔傳了網站原始檔給朋友修改~

把奇怪的連結去掉了QQ

為什麼會被放奇妙的連結兔也不清楚

總之有時候網站不好好管理檢查就會這樣倒楣QQ ...

很好奇那個奇怪的連結是什麼



歡迎光臨 鐵之狂傲 (https://www.gamez.com.tw/)