网站被黑几天了。怎样解决啊,不知是哪里的漏洞
2016-07-07 15:26 来源:www.chinab4c.com 作者:ecshop专家
www.51szb.com
今天一天都打不开,一打开都到空间商的页面提示:网站占用大量服务器资源被关闭。。
问了下空间商,说我的空间CPU占用超过6%以上了。。
我这不是下载站,也不是什么在线资源站,,
怀疑是黑客攻击了,下载了FTP的log日志记录看了下,里面有很多这样的访问记录
d:\iislog\W3SVC\ra100507.ibl 55505 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /psovweb.rar - -
d:\iislog\W3SVC\ra100507.ibl 55506 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /web.rar - -
d:\iislog\W3SVC\ra100507.ibl 55507 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /web.rar - -
d:\iislog\W3SVC\ra100507.ibl 55509 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /ejlrweb.zip - -
d:\iislog\W3SVC\ra100507.ibl 55510 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /web.zip - -
d:\iislog\W3SVC\ra100507.ibl 55511 GZXNZJ009 7744 2010-05-07 04:44:46 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /web.zip - -
d:\iislog\W3SVC\ra100507.ibl 55512 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 62 0 104 64 /mstmwww.rar - -
d:\iislog\W3SVC\ra100507.ibl 55513 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /www.rar - -
d:\iislog\W3SVC\ra100507.ibl 55514 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /www.rar - -
d:\iislog\W3SVC\ra100507.ibl 55515 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /slouwww.zip - -
d:\iislog\W3SVC\ra100507.ibl 55516 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /www.zip - -
d:\iislog\W3SVC\ra100507.ibl 55517 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /www.zip - -
d:\iislog\W3SVC\ra100507.ibl 55518 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 108 64 /xytrwwwroot.rar - -
d:\iislog\W3SVC\ra100507.ibl 55519 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /wwwroot.rar - -
d:\iislog\W3SVC\ra100507.ibl 55520 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /wwwroot.rar - -
d:\iislog\W3SVC\ra100507.ibl 55521 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 108 64 /jtjgwwwroot.zip - -
d:\iislog\W3SVC\ra100507.ibl 55522 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /wwwroot.zip - -
d:\iislog\W3SVC\ra100507.ibl 55523 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /wwwroot.zip - -
d:\iislog\W3SVC\ra100507.ibl 55524 GZXNZJ009 7744 2010-05-07 04:44:47 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 106 64 /bpujHYTop.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55525 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 102 64 /HYTop.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55526 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 102 64 /HYTop.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55527 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 107 64 /cwnhpacket.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55528 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /packet.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55529 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /packet.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55530 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 106 64 /heontomdb.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55531 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 102 64 /tomdb.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55532 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 102 64 /tomdb.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55533 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 104 64 /yvovHSH.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55534 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /HSH.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55535 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 100 64 /HSH.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55538 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 107 64 /lveebeifen.rar - -
d:\iislog\W3SVC\ra100507.ibl 55539 GZXNZJ009 7744 2010-05-07 04:44:48 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /beifen.rar - -
d:\iislog\W3SVC\ra100507.ibl 55540 GZXNZJ009 7744 2010-05-07 04:44:49 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /beifen.rar - -
d:\iislog\W3SVC\ra100507.ibl 55541 GZXNZJ009 7744 2010-05-07 04:44:49 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 107 64 /ihfhbeifen.zip - -
d:\iislog\W3SVC\ra100507.ibl 55545 GZXNZJ009 7744 2010-05-07 04:44:52 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 3015 0 103 64 /beifen.zip - -
d:\iislog\W3SVC\ra100507.ibl 55546 GZXNZJ009 7744 2010-05-07 04:44:52 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /beifen.zip - -
d:\iislog\W3SVC\ra100507.ibl 55547 GZXNZJ009 7744 2010-05-07 04:44:52 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 62 0 107 64 /knxabeifen.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55548 GZXNZJ009 7744 2010-05-07 04:44:52 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /beifen.mdb - -
d:\iislog\W3SVC\ra100507.ibl 55549 GZXNZJ009 7744 2010-05-07 04:44:52 117.35.158.9 59.36.100.204 80 GET HTTP/1.1 404 0 46 0 103 64 /beifen.mdb - -
大家帮忙看看,是什么问题,,,我的FTP上也没有这些 rar的文件 |
|
回答:
扫描器嘛,如果存在就扫到了,如果没有,就好,
allan147 发表于 2010-5-23 16:26 要怎么解决啊,,
经常会导致CPU负荷高,网站被空间商关 |