Chinaunix

标题: web遭攻击？？？ [打印本页]

作者: zzystar 时间: 2006-08-09 15:54
标题: web遭攻击？？？
APACHE一刚开还能上，一会儿就上不了了，晕高手帮忙看看

freebsd5.4+ipfw
ipfw.conf内容

add 9989 deny all from 218.18.156.2 to any
add 9990 deny all from 222.219.130.3 to any
add 9991 deny all from 222.187.12.214 to any
add 9992 deny all from 220.160.217.241 to any
add 9993 deny all from 222.140.54.103 to any
add 9994 deny all from 58.48.40.190 to any
add 9995 deny all from 220.160.175.144 to any
add 9996 deny all from 125.79.156.115 to any
add 9997 deny all from 222.218.10.146 to any
add 9998 deny all from 221.237.166.160 to any
add 9999 deny all from 61.51.39.45 to any
add 10000 allow tcp from any to 218.108.41.* 80 in
add 10001 allow tcp from 218.108.41.* 80 to any out
#######ftp######
add 10002 allow tcp from any to 218.108.41.* 21 in
add 10003 allow tcp from 218.108.41.* 21 to any out
add 10004 allow tcp from any to 218.108.41.* 30000-30050 in via xl0
add 10005 allow tcp from 218.108.41.* 30000-30050 to any out via xl0
add 10006 allow tcp from any to 218.108.41.* 22 in
add 10007 allow tcp from 218.108.41.* 22 to any out
add 10008 allow tcp from any to 218.108.41.* 3306 in
#add 10009 allow tcp from 218.108.41.* to any out
add 10008 deny log ip from any to any

netstat -a

tcp4 274 0 center.http 220.166.37.210.4257 CLOSE_WAIT
tcp4 177 0 center.http 61.157.136.130.35289 ESTABLISHED
tcp4 275 0 center.http 222.188.96.242.1533 CLOSE_WAIT
tcp4 197 0 center.http 60.1.118.21.4163 ESTABLISHED
tcp4 275 0 center.http 220.168.113.27.5044 ESTABLISHED
tcp4 195 0 center.http 218.69.136.61.8044 ESTABLISHED
tcp4 192 0 center.http 221.131.64.55.1438 ESTABLISHED
tcp4 0 48 center.ssh 219.82.36.174.1060 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3230 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3233 ESTABLISHED
tcp4 175 0 center.http 222.240.92.132.2153 ESTABLISHED
tcp4 373 0 center.http 218.13.234.66.3232 ESTABLISHED
tcp4 275 0 center.http 220.166.37.210.4226 CLOSE_WAIT
tcp4 0 0 center.http 202.108.23.93.51561 CLOSE_WAIT
tcp4 185 0 center.http 218.70.159.89.1559 ESTABLISHED
tcp4 172 0 center.http 218.61.26.178.3673 ESTABLISHED
tcp4 282 0 center.http 221.239.148.202.2026 ESTABLISHED
tcp4 182 0 center.http 222.182.252.16.2388 ESTABLISHED
tcp4 182 0 center.http 218.88.158.73.1242 ESTABLISHED
tcp4 436 0 center.http 221.15.198.206.12330 CLOSE_WAIT
tcp4 436 0 center.http 221.201.126.106.50701 ESTABLISHED
tcp4 174 0 center.http 61.236.18.211.1852 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3229 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3228 ESTABLISHED
tcp4 275 0 center.http 218.93.51.245.3100 ESTABLISHED
tcp4 274 0 center.http 222.91.206.137.3203 CLOSE_WAIT
tcp4 174 0 center.http 222.172.197.4.2164 ESTABLISHED
tcp4 282 0 center.http 221.239.148.202.1980 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3226 ESTABLISHED
tcp4 414 0 center.http 60.3.32.157.19489 CLOSE_WAIT
tcp4 413 0 center.http 218.8.218.104.13298 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1956 ESTABLISHED
tcp4 414 0 center.http 60.3.32.157.19476 CLOSE_WAIT
tcp4 275 0 center.http 222.91.206.137.3176 CLOSE_WAIT
tcp4 436 0 center.http 60.211.161.74.6302 CLOSE_WAIT
tcp4 274 0 center.http 219.234.7.162.1646 ESTABLISHED
tcp4 172 0 center.http 218.75.98.14.11765 ESTABLISHED
tcp4 275 0 center.http 220.176.140.47.3926 CLOSE_WAIT
tcp4 274 0 center.http 222.91.206.137.3154 CLOSE_WAIT
tcp4 414 0 center.http 60.3.32.157.19441 CLOSE_WAIT
tcp4 275 0 center.http 218.92.144.124.60495 CLOSE_WAIT
tcp4 414 0 center.http 60.3.32.157.19436 CLOSE_WAIT
tcp4 274 0 center.http 222.91.206.137.3143 CLOSE_WAIT
tcp4 182 0 center.http 61.163.180.130.21674 ESTABLISHED
tcp4 275 0 center.http 222.91.206.137.3132 CLOSE_WAIT
tcp4 201 0 center.http 221.1.171.216.1288 ESTABLISHED
tcp4 275 0 center.http 218.92.144.124.60463 CLOSE_WAIT
tcp4 275 0 center.http 222.76.81.7.43438 CLOSE_WAIT
tcp4 284 0 center.http 124.163.22.71.2156 CLOSE_WAIT
tcp4 414 0 center.http 60.3.32.157.19422 CLOSE_WAIT
tcp4 671 0 center.http 219.82.36.174.1059 ESTABLISHED
tcp4 274 0 center.http 220.166.37.210.4076 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1910 ESTABLISHED
tcp4 275 0 center.http 218.92.250.126.60447 CLOSE_WAIT
tcp4 275 0 center.http 218.92.144.124.60442 CLOSE_WAIT
tcp4 275 0 center.http 218.74.252.163.1372 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3224 ESTABLISHED
tcp4 275 0 center.http 218.74.252.163.1355 CLOSE_WAIT
tcp4 503 0 center.http 124.163.22.71.2135 CLOSE_WAIT
tcp4 192 0 center.http 61.51.163.196.19027 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3222 ESTABLISHED
tcp4 275 0 center.http 220.185.255.200.2215 CLOSE_WAIT
tcp4 174 0 center.http 60.26.228.216.2127 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3221 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3220 ESTABLISHED
tcp4 284 0 center.http 124.163.22.71.2109 CLOSE_WAIT
tcp4 230 0 center.http 221.210.231.224.4283 CLOSE_WAIT
tcp4 275 0 center.http 60.185.133.134.1640 CLOSE_WAIT
tcp4 284 0 center.http 124.163.22.71.2098 CLOSE_WAIT
tcp4 273 0 center.http 218.64.15.184.3372 CLOSE_WAIT
tcp4 273 0 center.http 218.64.15.184.3362 CLOSE_WAIT
tcp4 275 0 center.http 222.76.81.7.43299 CLOSE_WAIT
tcp4 284 0 center.http 124.163.22.71.2082 CLOSE_WAIT
tcp4 275 0 center.http 222.91.206.137.3006 CLOSE_WAIT
tcp4 196 0 center.http 60.208.184.131.62488 CLOSE_WAIT
tcp4 275 0 center.http 218.64.15.184.3350 CLOSE_WAIT
tcp4 0 0 center.http 220.181.18.85.56319 CLOSE_WAIT
tcp4 275 0 center.http 60.185.133.134.1567 CLOSE_WAIT
tcp4 275 0 center.http 218.64.15.184.3336 CLOSE_WAIT
tcp4 275 0 center.http 60.185.133.134.1539 CLOSE_WAIT
tcp4 275 0 center.http 218.64.15.184.3330 CLOSE_WAIT
tcp4 274 0 center.http 218.92.144.124.60264 CLOSE_WAIT
tcp4 414 0 center.http 125.42.131.41.3960 CLOSE_WAIT
tcp4 275 0 center.http 60.185.133.134.1535 CLOSE_WAIT
tcp4 274 0 center.http 218.64.15.184.3320 CLOSE_WAIT
tcp4 413 0 center.http 218.24.103.62.3570 CLOSE_WAIT
tcp4 275 0 center.http 60.185.133.134.1522 CLOSE_WAIT
tcp4 435 0 center.http 220.207.146.190.2294 CLOSE_WAIT
tcp4 284 0 center.http 124.163.22.71.2045 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3889 CLOSE_WAIT
tcp4 275 0 center.http 218.74.252.163.1248 CLOSE_WAIT
tcp4 275 0 center.http 61.128.225.84.37812 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3875 CLOSE_WAIT
tcp4 275 0 center.http 61.128.225.84.37811 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3871 CLOSE_WAIT
tcp4 481 0 center.http 124.163.22.71.2029 CLOSE_WAIT
tcp4 268 0 center.http 218.23.55.86.2184 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1937 CLOSE_WAIT
tcp4 512 0 center.http 222.172.197.4.2157 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1924 CLOSE_WAIT
tcp4 275 0 center.http 61.128.225.84.37810 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3860 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1907 CLOSE_WAIT
tcp4 414 0 center.http 60.3.32.157.19358 CLOSE_WAIT
tcp4 193 0 center.http 218.21.128.42.18250 ESTABLISHED
tcp4 274 0 center.http 218.19.126.201.15824 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1879 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1868 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1867 CLOSE_WAIT
tcp4 253 0 center.http 221.233.5.22.1634 CLOSE_WAIT
tcp4 275 0 center.http 222.76.81.7.43192 CLOSE_WAIT
tcp4 0 0 center.http 202.108.23.93.41153 CLOSE_WAIT
tcp4 275 0 center.http 221.239.57.77.1228 CLOSE_WAIT
tcp4 274 0 center.http 60.164.167.10.3085 CLOSE_WAIT
tcp4 253 0 center.http 221.233.5.22.1624 CLOSE_WAIT
tcp4 253 0 center.http 221.233.5.22.1622 CLOSE_WAIT
tcp4 253 0 center.http 221.233.5.22.1621 CLOSE_WAIT
tcp4 592 0 center.http 211.138.147.33.27780 CLOSE_WAIT
tcp4 275 0 center.http 61.128.225.84.37808 CLOSE_WAIT
tcp4 275 0 center.http 220.185.255.200.2105 CLOSE_WAIT
tcp4 275 0 center.http 218.64.15.184.3224 CLOSE_WAIT
tcp4 275 0 center.http 220.176.140.47.3687 CLOSE_WAIT
tcp4 671 0 center.http 218.108.240.196.41227 ESTABLISHED
tcp4 275 0 center.http 60.164.167.10.3049 CLOSE_WAIT
tcp4 275 0 center.http 60.176.7.81.2417 CLOSE_WAIT
tcp4 275 0 center.http 218.74.252.163.1138 CLOSE_WAIT
tcp4 275 0 center.http 60.164.167.10.3042 CLOSE_WAIT
tcp4 275 0 center.http 222.243.29.251.1743 CLOSE_WAIT
tcp4 274 0 center.http 60.164.167.10.3019 CLOSE_WAIT
tcp4 174 0 center.http 222.90.71.226.1683 ESTABLISHED
tcp4 275 0 center.http 60.185.133.134.1375 CLOSE_WAIT
tcp4 275 0 center.http 222.74.130.52.2277 CLOSE_WAIT
tcp4 274 0 center.http 60.164.167.10.2996 CLOSE_WAIT
tcp4 275 0 center.http 222.74.130.52.2256 CLOSE_WAIT
tcp4 275 0 center.http 221.239.57.77.1039 CLOSE_WAIT
tcp4 279 0 center.http 202.97.145.43.52245 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1666 CLOSE_WAIT
tcp4 230 0 center.http 221.210.231.224.4254 CLOSE_WAIT
tcp4 274 0 center.http 60.164.167.10.2928 CLOSE_WAIT
tcp4 274 0 center.http 218.63.206.214.37090 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1653 CLOSE_WAIT
tcp4 253 0 center.http 221.233.5.22.1483 CLOSE_WAIT
tcp4 436 0 center.http 60.20.108.161.3913 CLOSE_WAIT
tcp4 274 0 center.http 218.19.126.201.15697 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3207 CLOSE_WAIT
tcp4 373 0 center.http 218.13.234.66.3210 CLOSE_WAIT
tcp4 275 0 center.http 218.63.206.214.37001 CLOSE_WAIT
tcp4 275 0 center.http 218.63.206.214.36995 CLOSE_WAIT
tcp4 275 0 center.http 221.234.120.68.1957 CLOSE_WAIT
tcp4 317 0 center.http 220.248.201.227.1789 CLOSE_WAIT
tcp4 262 0 center.http 220.248.201.227.1783 CLOSE_WAIT
tcp4 339 0 center.http 220.248.201.227.1780 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3211 CLOSE_WAIT
tcp4 284 0 center.http 220.248.201.227.1772 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3787 CLOSE_WAIT
tcp4 339 0 center.http 220.248.201.227.1737 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3208 CLOSE_WAIT
tcp4 176 0 center.http 218.68.235.149.1591 ESTABLISHED
tcp4 282 0 center.http 221.239.148.202.1606 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3206 CLOSE_WAIT
tcp4 274 0 center.http 60.176.7.81.2264 CLOSE_WAIT
tcp4 275 0 center.http 222.74.130.52.2140 CLOSE_WAIT
tcp4 436 0 center.http 221.208.216.109.3827 CLOSE_WAIT
tcp4 275 0 center.http 60.177.162.136.3140 CLOSE_WAIT
tcp4 196 0 center.http 60.208.184.131.62480 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3205 CLOSE_WAIT
tcp4 174 0 center.http 221.236.102.91.2690 ESTABLISHED
tcp4 282 0 center.http 221.239.148.202.1569 CLOSE_WAIT
tcp4 275 0 center.http 218.63.206.214.36762 CLOSE_WAIT
tcp4 275 0 center.http 60.177.162.136.3121 CLOSE_WAIT
tcp4 391 0 center.http 221.212.193.170.24515 CLOSE_WAIT
tcp4 274 0 center.http 221.234.120.68.1917 CLOSE_WAIT
tcp4 414 0 center.http 218.62.121.13.18400 CLOSE_WAIT
tcp4 0 0 center.http 220.181.18.85.46180 CLOSE_WAIT
tcp4 252 0 center.http 220.164.43.26.2174 CLOSE_WAIT
tcp4 275 0 center.http 221.234.120.68.1914 CLOSE_WAIT
tcp4 274 0 center.http 61.150.93.242.2963 CLOSE_WAIT
tcp4 253 0 center.http 124.172.191.113.31417 CLOSE_WAIT
tcp4 252 0 center.http 220.164.43.26.2150 CLOSE_WAIT
tcp4 283 0 center.http 221.208.69.213.4408 CLOSE_WAIT
tcp4 192 0 center.http 221.217.154.151.1583 CLOSE_WAIT
tcp4 284 0 center.http 221.208.69.213.4381 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1506 CLOSE_WAIT
tcp4 275 0 center.http 61.150.93.242.2896 CLOSE_WAIT
tcp4 275 0 center.http 61.150.93.242.2887 CLOSE_WAIT
tcp4 284 0 center.http 221.208.69.213.4354 CLOSE_WAIT
tcp4 339 0 center.http 221.208.69.213.4355 CLOSE_WAIT
tcp4 253 0 center.http 124.172.191.113.44812 CLOSE_WAIT
tcp4 275 0 center.http 61.150.93.242.2868 CLOSE_WAIT
tcp4 284 0 center.http 221.208.69.213.4339 CLOSE_WAIT
tcp4 275 0 center.http 222.82.66.159.3936 CLOSE_WAIT
tcp4 253 0 center.http 220.164.43.26.2092 CLOSE_WAIT
tcp4 0 0 center.http 202.108.250.253.58374 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3198 CLOSE_WAIT
tcp4 275 0 center.http 221.234.120.68.1877 CLOSE_WAIT
tcp4 253 0 center.http 58.49.176.182.45466 CLOSE_WAIT
tcp4 252 0 center.http 58.49.176.182.45210 CLOSE_WAIT
tcp4 253 0 center.http 58.49.176.182.44442 CLOSE_WAIT
tcp4 253 0 center.http 124.172.191.113.34069 CLOSE_WAIT
tcp4 253 0 center.http 58.49.176.182.41882 CLOSE_WAIT
tcp4 275 0 center.http 222.170.139.204.1564 CLOSE_WAIT
tcp4 112 0 center.http 218.90.196.144.3043 ESTABLISHED
tcp4 374 0 center.http 218.13.234.66.3196 CLOSE_WAIT
tcp4 252 0 center.http 58.49.176.182.37786 CLOSE_WAIT
tcp4 253 0 center.http 58.49.176.182.37274 CLOSE_WAIT
tcp4 339 0 center.http 221.208.69.213.4286 CLOSE_WAIT
tcp4 275 0 center.http 61.150.93.242.2776 CLOSE_WAIT
tcp4 244 0 center.http 202.108.1.6.4079 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3195 CLOSE_WAIT
tcp4 275 0 center.http 222.82.66.159.3870 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3194 CLOSE_WAIT
tcp4 275 0 center.http 218.92.19.53.62646 CLOSE_WAIT
tcp4 275 0 center.http 59.52.80.97.3737 CLOSE_WAIT
tcp4 263 0 center.http 221.208.224.170.1886 ESTABLISHED
tcp4 275 0 center.http 60.176.7.81.2179 CLOSE_WAIT
tcp4 436 0 center.http 60.211.161.74.6074 CLOSE_WAIT
tcp4 481 0 center.http 221.218.219.197.1171 CLOSE_WAIT
tcp4 275 0 center.http 222.88.159.134.3124 CLOSE_WAIT
tcp4 192 0 center.http 61.144.193.66.2850 CLOSE_WAIT
tcp4 436 0 center.http 218.61.135.156.2246 CLOSE_WAIT
tcp4 253 0 center.http 124.172.191.113.17372 CLOSE_WAIT
tcp4 277 0 center.http 202.108.1.6.1448 CLOSE_WAIT
tcp4 253 0 center.http 220.164.43.26.2049 CLOSE_WAIT
tcp4 435 0 center.http 58.242.124.235.1976 CLOSE_WAIT
tcp4 275 0 center.http 218.92.19.53.62512 CLOSE_WAIT
tcp4 275 0 center.http 220.185.255.200.2001 CLOSE_WAIT
tcp4 275 0 center.http 60.177.162.136.3012 CLOSE_WAIT
tcp4 274 0 center.http 222.82.66.159.3800 CLOSE_WAIT
tcp4 253 0 center.http 58.49.176.182.10394 CLOSE_WAIT
tcp4 172 0 center.http 222.142.117.110.4962 CLOSE_WAIT
tcp4 174 0 center.http 60.15.20.5.3599 CLOSE_WAIT
tcp4 275 0 center.http 222.88.79.6.62449 CLOSE_WAIT
tcp4 274 0 center.http 222.88.79.6.62440 CLOSE_WAIT
tcp4 182 0 center.http 218.3.15.61.1880 CLOSE_WAIT
tcp4 253 0 center.http 220.164.43.26.1976 CLOSE_WAIT
tcp4 274 0 center.http 222.82.66.159.3778 CLOSE_WAIT
tcp4 338 0 center.http 122.48.0.115.47437 CLOSE_WAIT
tcp4 274 0 center.http 220.185.255.200.1995 CLOSE_WAIT
tcp4 385 0 center.http 222.216.6.146.65126 ESTABLISHED
tcp4 253 0 center.http 124.172.191.113.26868 CLOSE_WAIT
tcp4 274 0 center.http 222.82.66.159.3767 CLOSE_WAIT
tcp4 275 0 center.http 61.138.211.194.37754 CLOSE_WAIT
tcp4 275 0 center.http 61.138.211.194.13004 CLOSE_WAIT
tcp4 196 0 center.http 60.208.184.131.62471 CLOSE_WAIT
tcp4 571 0 center.http 220.184.226.25.1433 CLOSE_WAIT
tcp4 385 0 center.http 222.216.6.146.64937 ESTABLISHED
tcp4 275 0 center.http 61.138.211.194.37675 CLOSE_WAIT
tcp4 275 0 center.http 221.234.34.186.62439 CLOSE_WAIT
tcp4 274 0 center.http 61.138.211.194.37668 CLOSE_WAIT
tcp4 275 0 center.http 222.82.66.159.3726 CLOSE_WAIT
tcp4 245 0 center.http 59.34.165.190.2263 CLOSE_WAIT
tcp4 274 0 center.http 61.138.211.194.37638 CLOSE_WAIT
tcp4 275 0 center.http 221.234.34.186.62346 CLOSE_WAIT
tcp4 192 0 center.http 218.74.112.237.7447 CLOSE_WAIT
tcp4 436 0 center.http 124.129.1.10.2038 CLOSE_WAIT
tcp4 275 0 center.http 221.234.34.186.62310 CLOSE_WAIT
tcp4 0 0 center.http 220.181.18.85.36042 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32997 CLOSE_WAIT
tcp4 230 0 center.http 219.130.184.4.32996 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32995 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32994 CLOSE_WAIT
tcp4 274 0 center.http 222.88.79.6.64021 CLOSE_WAIT
tcp4 282 0 center.http 221.239.148.202.1151 CLOSE_WAIT
tcp4 275 0 center.http 221.234.34.186.62218 CLOSE_WAIT
tcp4 263 0 center.http 221.208.224.170.1885 ESTABLISHED
tcp4 274 0 center.http 221.234.34.186.62158 CLOSE_WAIT
tcp4 274 0 center.http 218.19.126.201.15305 CLOSE_WAIT
tcp4 385 0 center.http 222.216.6.146.64729 ESTABLISHED
tcp4 275 0 center.http 222.85.93.13.1393 CLOSE_WAIT
tcp4 385 0 center.http 222.216.6.146.64706 ESTABLISHED
tcp4 274 0 center.http 221.234.34.186.62102 CLOSE_WAIT
tcp4 172 0 center.http 61.54.231.124.2443 ESTABLISHED
tcp4 275 0 center.http 222.70.200.224.19022 CLOSE_WAIT
tcp4 384 0 center.http 222.216.6.146.64674 ESTABLISHED
tcp4 274 0 center.http 61.138.211.194.13020 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1358 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1357 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3189 CLOSE_WAIT
tcp4 0 0 center.http 202.108.250.253.48038 CLOSE_WAIT
tcp4 284 0 center.http 60.18.31.2.3179 CLOSE_WAIT
tcp4 373 0 center.http 218.13.234.66.3188 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32888 CLOSE_WAIT
tcp4 175 0 center.http 202.108.249.177.38390 ESTABLISHED
tcp4 176 0 center.http 202.108.249.177.38389 ESTABLISHED
tcp4 253 0 center.http 218.87.160.199.1902 CLOSE_WAIT
tcp4 275 0 center.http 220.179.178.117.21104 CLOSE_WAIT
tcp4 253 0 center.http 218.87.160.199.1869 CLOSE_WAIT
tcp4 200 0 center.http 221.218.219.197.1133 CLOSE_WAIT
tcp4 284 0 center.http 60.18.31.2.3144 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32885 CLOSE_WAIT
tcp4 253 0 center.http 218.87.160.199.1823 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1321 CLOSE_WAIT
tcp4 204 0 center.http 61.188.94.241.4649 ESTABLISHED
tcp4 275 0 center.http 219.139.38.4.3412 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3176 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3175 CLOSE_WAIT
tcp4 274 0 center.http 222.70.200.224.18990 CLOSE_WAIT
tcp4 275 0 center.http 218.63.122.139.50848 CLOSE_WAIT
tcp4 175 0 center.http 221.218.219.197.1132 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1306 CLOSE_WAIT
tcp4 275 0 center.http 219.139.38.4.3372 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3173 CLOSE_WAIT
tcp4 436 0 center.http 222.33.81.214.43011 CLOSE_WAIT
tcp4 275 0 center.http 219.139.38.4.3349 CLOSE_WAIT
tcp4 274 0 center.http 219.139.38.4.3344 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32839 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32838 CLOSE_WAIT
tcp4 274 0 center.http 59.57.237.63.2076 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3168 CLOSE_WAIT
tcp4 275 0 center.http 59.57.237.63.2072 CLOSE_WAIT
tcp4 275 0 center.http 219.128.35.246.59826 CLOSE_WAIT
tcp4 274 0 center.http 222.82.66.159.3632 CLOSE_WAIT
tcp4 275 0 center.http 59.57.237.63.2059 CLOSE_WAIT

作者: zzystar 时间: 2006-08-09 15:55
tcp4 275 0 center.http 219.128.35.246.59800 CLOSE_WAIT
tcp4 284 0 center.http 60.18.31.2.3061 CLOSE_WAIT
tcp4 274 0 center.http 59.57.237.63.2033 CLOSE_WAIT
tcp4 316 0 center.http 60.18.31.2.3050 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32810 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1261 CLOSE_WAIT
tcp4 274 0 center.http 222.223.67.116.3562 CLOSE_WAIT
tcp4 253 0 center.http 218.87.160.199.1558 CLOSE_WAIT
tcp4 274 0 center.http 60.180.107.164.46603 CLOSE_WAIT
tcp4 275 0 center.http 220.179.178.117.21042 CLOSE_WAIT
tcp4 275 0 center.http 220.179.178.117.21041 CLOSE_WAIT
tcp4 362 0 center.http 222.216.6.146.64025 ESTABLISHED
tcp4 275 0 center.http 222.223.67.116.3524 CLOSE_WAIT
tcp4 274 0 center.http 219.128.35.246.59771 CLOSE_WAIT
tcp4 253 0 center.http 219.130.184.4.32759 CLOSE_WAIT
tcp4 275 0 center.http 60.180.107.164.46582 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1245 CLOSE_WAIT
tcp4 436 0 center.http 58.244.87.40.2897 CLOSE_WAIT
tcp4 207 0 center.http 60.211.175.52.54014 ESTABLISHED
tcp4 427 0 center.http 220.192.25.16.1381 CLOSE_WAIT
tcp4 275 0 center.http 222.223.67.116.3488 CLOSE_WAIT
tcp4 414 0 center.http 221.2.249.243.1323 CLOSE_WAIT
tcp4 275 0 center.http 218.87.225.76.1816 CLOSE_WAIT
tcp4 751 0 center.http 222.131.165.67.10745 CLOSE_WAIT
tcp4 175 0 center.http 218.61.31.110.1648 ESTABLISHED
tcp4 275 0 center.http 222.70.200.224.18911 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3163 CLOSE_WAIT
tcp4 275 0 center.http 222.85.93.13.1206 CLOSE_WAIT
tcp4 275 0 center.http 59.57.237.63.1930 CLOSE_WAIT
tcp4 275 0 center.http 219.128.35.246.59755 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3161 CLOSE_WAIT
tcp4 273 0 center.http 218.92.145.114.2250 CLOSE_WAIT
tcp4 275 0 center.http 218.92.145.114.2241 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3160 CLOSE_WAIT
tcp4 275 0 center.http 218.92.145.114.2195 CLOSE_WAIT
tcp4 275 0 center.http 60.176.7.81.1859 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3156 CLOSE_WAIT
tcp4 435 0 center.http 60.211.161.74.5838 CLOSE_WAIT
tcp4 275 0 center.http 218.87.225.76.1742 CLOSE_WAIT
tcp4 436 0 center.http 221.201.126.106.50282 CLOSE_WAIT
tcp4 275 0 center.http 218.92.145.114.2168 CLOSE_WAIT
tcp4 435 0 center.http 222.137.149.165.2565 CLOSE_WAIT
tcp4 230 0 center.http 222.131.165.67.10727 CLOSE_WAIT
tcp4 275 0 center.http 60.180.107.164.46492 CLOSE_WAIT
tcp4 275 0 center.http 222.223.67.116.3395 CLOSE_WAIT
tcp4 275 0 center.http 218.87.225.76.1721 CLOSE_WAIT
tcp4 274 0 center.http 124.29.44.91.1636 CLOSE_WAIT
tcp4 275 0 center.http 124.29.44.91.1635 CLOSE_WAIT
tcp4 363 0 center.http 137.132.3.6.13991 ESTABLISHED
tcp4 517 0 center.http 137.132.3.6.13951 ESTABLISHED
tcp4 280 0 center.http 222.18.59.2.1270 CLOSE_WAIT
tcp4 275 0 center.http 219.139.38.4.3260 CLOSE_WAIT
tcp4 435 0 center.http 221.6.38.58.1745 CLOSE_WAIT
tcp4 275 0 center.http 124.29.44.91.1602 CLOSE_WAIT
tcp4 339 0 center.http 60.200.141.20.3245 CLOSE_WAIT
tcp4 284 0 center.http 60.200.141.20.3240 CLOSE_WAIT
tcp4 253 0 center.http 219.145.236.1.2137 CLOSE_WAIT
tcp4 338 0 center.http 60.200.141.20.3205 CLOSE_WAIT
tcp4 274 0 center.http 220.185.255.200.1830 CLOSE_WAIT
tcp4 283 0 center.http 60.200.141.20.3201 CLOSE_WAIT
tcp4 274 0 center.http 59.57.237.63.1747 CLOSE_WAIT
tcp4 282 0 center.http 60.210.189.207.4977 CLOSE_WAIT
tcp4 339 0 center.http 60.200.141.20.3174 CLOSE_WAIT
tcp4 275 0 center.http 218.87.225.76.1661 CLOSE_WAIT
tcp4 274 0 center.http 218.92.145.114.2139 CLOSE_WAIT
tcp4 284 0 center.http 60.200.141.20.3139 CLOSE_WAIT
tcp4 435 0 center.http 60.210.189.207.4947 CLOSE_WAIT
tcp4 0 0 center.http 202.108.23.93.58663 CLOSE_WAIT
tcp4 275 0 center.http 221.227.244.218.1360 CLOSE_WAIT
tcp4 275 0 center.http 222.188.40.239.3045 CLOSE_WAIT
tcp4 275 0 center.http 221.227.244.218.1347 CLOSE_WAIT
tcp4 0 0 center.http 202.108.250.253.37702 CLOSE_WAIT
tcp4 284 0 center.http 60.200.141.20.3072 CLOSE_WAIT
tcp4 339 0 center.http 60.200.141.20.3071 CLOSE_WAIT
tcp4 274 0 center.http 219.128.35.246.59688 CLOSE_WAIT
tcp4 275 0 center.http 221.227.244.218.1307 CLOSE_WAIT
tcp4 282 0 center.http 210.21.234.3.53960 CLOSE_WAIT
tcp4 436 0 center.http 210.21.234.3.53953 CLOSE_WAIT
tcp4 339 0 center.http 60.200.141.20.4980 CLOSE_WAIT
tcp4 275 0 center.http 221.227.244.218.1278 CLOSE_WAIT
tcp4 436 0 center.http 60.216.171.235.1853 CLOSE_WAIT
tcp4 275 0 center.http 219.146.46.239.2368 CLOSE_WAIT
tcp4 253 0 center.http 219.145.236.1.1957 CLOSE_WAIT
tcp4 275 0 center.http 222.188.40.239.3021 CLOSE_WAIT
tcp4 274 0 center.http 219.146.46.239.2347 CLOSE_WAIT
tcp4 275 0 center.http 219.128.35.246.59664 CLOSE_WAIT
tcp4 274 0 center.http 218.92.145.114.2111 CLOSE_WAIT
tcp4 275 0 center.http 219.146.46.239.2311 CLOSE_WAIT
tcp4 275 0 center.http 219.146.46.239.2302 CLOSE_WAIT
tcp4 275 0 center.http 219.128.35.246.59658 CLOSE_WAIT
tcp4 275 0 center.http 222.191.202.121.1638 CLOSE_WAIT
tcp4 275 0 center.http 221.227.244.218.1177 CLOSE_WAIT
tcp4 275 0 center.http 222.191.202.121.1602 CLOSE_WAIT
tcp4 275 0 center.http 219.146.46.239.2288 CLOSE_WAIT
tcp4 253 0 center.http 60.190.76.226.57496 CLOSE_WAIT
tcp4 192 0 center.http 218.24.224.45.63013 CLOSE_WAIT
tcp4 275 0 center.http 219.146.46.239.2253 CLOSE_WAIT
tcp4 275 0 center.http 219.128.35.246.59647 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1253 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1239 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1238 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1235 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1225 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1223 CLOSE_WAIT
tcp4 274 0 center.http 219.128.35.246.59643 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1212 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3132 CLOSE_WAIT
tcp4 374 0 center.http 218.13.234.66.3131 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1210 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1207 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1194 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1193 CLOSE_WAIT
tcp4 275 0 center.http 222.214.210.61.2022 CLOSE_WAIT
tcp4 275 0 center.http 218.18.156.2.1189 CLOSE_WAIT
tcp4 274 0 center.http 218.18.156.2.1185 CLOSE_WAIT
tcp4 0 33117 center.http 222.214.210.61.2014 CLOSE_WAIT
tcp4 0 33609 center.http 218.18.156.2.1179 CLOSE_WAIT
tcp4 0 33042 center.http 218.18.156.2.1177 CLOSE_WAIT
tcp4 0 34893 center.http 218.18.156.2.1176 CLOSE_WAIT
tcp4 0 34151 center.http 218.18.156.2.1167 CLOSE_WAIT
tcp4 0 32390 center.http 218.18.156.2.1163 CLOSE_WAIT
tcp4 0 34813 center.http 222.214.210.61.2011 CLOSE_WAIT
tcp4 0 33736 center.http 218.18.156.2.1161 CLOSE_WAIT
tcp4 0 32780 center.http 222.214.210.61.2001 CLOSE_WAIT
tcp4 0 32045 center.http 218.18.156.2.1152 CLOSE_WAIT
tcp4 0 33634 center.http 222.214.210.61.1994 LAST_ACK
tcp4 0 34693 center.http 218.18.156.2.1148 LAST_ACK
tcp4 0 32289 center.http 218.18.156.2.1141 LAST_ACK
tcp4 0 32800 center.http 218.18.156.2.1140 LAST_ACK
tcp4 0 34813 center.http 218.18.156.2.1139 LAST_ACK
tcp4 0 31535 center.http 218.18.156.2.1120 LAST_ACK
tcp4 0 31558 center.http 222.214.210.61.1981 LAST_ACK
tcp4 0 34823 center.http 218.18.156.2.1119 LAST_ACK
tcp4 0 32783 center.http 218.18.156.2.1118 LAST_ACK
tcp4 0 35050 center.http 218.18.156.2.1117 LAST_ACK
tcp4 0 31790 center.http 218.18.156.2.1116 LAST_ACK
tcp4 0 31503 center.http 222.214.210.61.1968 LAST_ACK
tcp4 0 32469 center.http 222.214.210.61.1963 LAST_ACK
tcp4 0 32324 center.http 222.214.210.61.1950 LAST_ACK
tcp4 0 33454 center.http 222.214.210.61.1946 LAST_ACK
tcp4 0 32498 center.http 222.214.210.61.1931 LAST_ACK
tcp4 0 33035 center.http 221.201.216.212.51782 LAST_ACK
tcp4 0 33454 center.http 222.214.210.61.1924 LAST_ACK
tcp4 0 34638 center.http 222.214.210.61.1915 LAST_ACK
tcp4 0 35262 center.http 222.214.210.61.1914 LAST_ACK
tcp4 0 32754 center.http 222.214.210.61.1908 LAST_ACK
tcp4 0 34162 center.http 218.18.156.2.1081 LAST_ACK
tcp4 0 32867 center.http 218.18.156.2.1076 LAST_ACK
tcp4 0 32392 center.http 222.214.210.61.1904 LAST_ACK
tcp4 0 33213 center.http 222.214.210.61.1901 LAST_ACK
tcp4 0 35012 center.http 218.18.156.2.1067 LAST_ACK
tcp4 0 35353 center.http 218.18.156.2.1065 LAST_ACK
tcp4 0 5399 center.http 221.239.148.202.1540 FIN_WAIT_1
tcp4 0 0 center.http 221.239.148.202.1539 FIN_WAIT_2
tcp4 0 0 center.http 221.239.148.202.1538 FIN_WAIT_2
tcp4 0 34663 center.http 221.239.148.202.1537 FIN_WAIT_1
tcp4 0 32291 center.http 218.18.156.2.1048 LAST_ACK
tcp4 0 31656 center.http 218.18.156.2.1028 LAST_ACK
tcp4 0 0 center.http 218.21.186.244.54115 FIN_WAIT_2
tcp4 0 34275 center.http 218.18.156.2.2023 LAST_ACK
tcp4 0 31581 center.http 219.128.35.246.59598 FIN_WAIT_1
tcp4 0 33880 center.http 221.234.64.76.3518 FIN_WAIT_1
tcp4 0 0 center.http 221.239.148.202.1504 FIN_WAIT_2
tcp4 0 32307 center.http 220.166.122.235.1268 LAST_ACK
tcp4 0 35413 center.http 220.166.122.235.1267 LAST_ACK
tcp4 0 34664 center.http 220.166.122.235.1247 LAST_ACK
tcp4 0 33700 center.http 220.166.122.235.1246 LAST_ACK
tcp4 0 31448 center.http 220.166.122.235.1244 LAST_ACK
tcp4 0 32772 center.http 220.166.122.235.1237 LAST_ACK
tcp4 0 34349 center.http 220.166.122.235.1210 LAST_ACK
tcp4 0 32863 center.http 220.166.122.235.1209 LAST_ACK
tcp4 0 32768 center.http 220.166.122.235.1208 LAST_ACK
tcp4 0 33277 center.http 220.166.122.235.1205 LAST_ACK
tcp4 0 33069 center.http 220.166.122.235.1184 LAST_ACK
tcp4 0 32718 center.http 220.166.122.235.1176 LAST_ACK
tcp4 0 23294 center.http 220.166.122.235.1171 LAST_ACK
tcp4 0 34875 center.http 220.166.122.235.1170 LAST_ACK
tcp4 0 33732 center.http 220.166.122.235.1169 LAST_ACK
tcp4 0 34857 center.http 220.166.122.235.1167 LAST_ACK
tcp4 0 34031 center.http 222.68.178.198.4777 FIN_WAIT_1
tcp4 0 32044 center.http 220.166.122.235.1159 LAST_ACK
tcp4 0 34201 center.http 220.166.122.235.1157 LAST_ACK
tcp4 0 33953 center.http 220.166.122.235.1156 LAST_ACK
tcp4 0 34242 center.http 220.166.122.235.1146 LAST_ACK
tcp4 0 34959 center.http 220.166.122.235.1143 LAST_ACK
tcp4 0 33953 center.http 220.166.122.235.1140 LAST_ACK
tcp4 0 35129 center.http 220.166.122.235.1138 LAST_ACK
tcp4 0 33185 center.http 220.166.122.235.1137 LAST_ACK
tcp4 0 35302 center.http 220.166.122.235.1135 LAST_ACK
tcp4 0 33187 center.http 60.10.7.105.1901 FIN_WAIT_1
tcp4 0 32044 center.http 220.166.122.235.1125 LAST_ACK
tcp4 0 32768 center.http 220.166.122.235.1088 FIN_WAIT_1
tcp4 0 31943 center.http 220.166.122.235.1042 FIN_WAIT_1
tcp4 0 32508 center.http 220.166.122.235.1039 FIN_WAIT_1
tcp4 0 34892 center.http 220.166.122.235.1041 FIN_WAIT_1
tcp4 0 0 center.http 125.79.153.155.16778 FIN_WAIT_2
tcp4 0 0 center.http 218.86.97.46.41368 FIN_WAIT_2
tcp4 0 34852 center.http 61.185.97.27.2667 LAST_ACK
tcp4 0 0 center.ssh 218.108.240.196.47983 ESTABLISHED
tcp4 0 31760 center.http 221.0.90.3.15366 LAST_ACK
tcp4 0 34945 center.http 58.63.158.125.1680 LAST_ACK
tcp4 0 33729 center.http 58.63.158.125.1664 LAST_ACK
tcp4 0 31841 center.http 58.63.158.125.1643 LAST_ACK
tcp4 0 33537 center.http 58.63.158.125.1625 LAST_ACK
tcp4 0 32579 center.http 58.63.158.125.1576 LAST_ACK
tcp4 0 33514 center.http 220.165.88.108.1604 LAST_ACK
tcp4 0 33045 center.http 218.22.194.42.3744 LAST_ACK
tcp4 0 33604 center.http 218.84.25.248.56573 LAST_ACK
tcp4 0 32579 center.http 61.165.6.6.3097 LAST_ACK
tcp4 0 32579 center.http 222.75.107.22.1287 LAST_ACK
tcp4 0 31548 center.http 220.169.234.83.3270 LAST_ACK
tcp4 0 34864 center.http 220.179.246.230.65428 LAST_ACK
tcp4 0 33604 center.http 60.31.22.140.1261 LAST_ACK
tcp4 0 32449 center.http 59.33.175.182.1559 FIN_WAIT_1

作者: HonestQiao 时间: 2006-08-09 17:00
http://www.hacker.cn/Get/ddos/0592811275835663.shtml

作者: zzystar 时间: 2006-08-09 20:26
版主回复的果然跟我想的一样，刚开始我还以为是APACHE代理，后来查看了一些文章认为是DDOS,就是好像BSD上单机防御比较麻烦，不知道有没有好的方法。比如修改内核参数SYSCTL，改APACHE配置，等等

作者: HonestQiao 时间: 2006-08-09 23:08

原帖由 zzystar 于 2006-8-9 20:26 发表
版主回复的果然跟我想的一样，刚开始我还以为是APACHE代理，后来查看了一些文章认为是DDOS,就是好像BSD上单机防御比较麻烦，不知道有没有好的方法。比如修改内核参数SYSCTL，改APACHE配置，等等

小量的可以封住，但是正规的话，没有办法。

作者: winterwolf 时间: 2006-08-10 13:21
可以用iplimit限制ip并发超过限制就Drop

net.xmlshop.cn 在买服务器的时候要求预装debian stable 优化就能直接用iptable设置它

也可以自己到netfilter.org上下载不过需要编译linux内核不是很容易

作者: bug_4ever 时间: 2006-08-15 12:20
增加tcp握手次数，精华区有

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)