banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register  
[Login] Loginhttp  | https  ]
 
Forum Index Thảo luận thâm nhập Đây là kiểu Ddos gì ?  XML
  [Question]   Đây là kiểu Ddos gì ? 21/02/2011 20:58:18 (+0700) | #1 | 231586
cutiblung
Member

[Minus]    0    [Plus]
Joined: 21/10/2009 01:00:20
Messages: 30
Offline
[Profile] [PM]
Mình sử dụng win2k3 vô web thấy không load được xem log thì như này:
Từ IP 123.24.113.32 nó cứ GET nhưng tại sao làm cho server không load được.Trên Fifox hiển thị máy chủ phản hồi quá lâu?Ping vẫn bình thường.Sau vài giây firewall block ip và lại bình thường.Anh em giúp giải thích và cùng phân tích nhé !

123.24.113.32 - - [21/Feb/2011:09:40:07 -0600] "GET /forum/ HTTP/1.1" 200 6251
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_important.css?v= HTTP/1.1" 200 1727
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_md5.js?v=387b1 HTTP/1.1" 200 5464
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_menu.js?v=387b1 HTTP/1.1" 200 9434
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_read_marker.js?v=387b1 HTTP/1.1" 200 3433
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/images/misc/vbulletin3_logo_white.gif HTTP/1.1" 200 12001
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/yui/connection/connection-min.js?v=387b1 HTTP/1.1" 200 11604
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/misc/navbits_start.gif HTTP/1.1" 200 1004
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/statusicon/forum_old.gif HTTP/1.1" 200 1628
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/buttons/collapse_tcat.gif HTTP/1.1" 200 642
123.24.113.32 - - [21/Feb/2011:09:40:10 -0600] "GET /forum/images/misc/whos_online.gif HTTP/1.1" 200 1440
123.24.113.32 - - [21/Feb/2011:09:40:10 -0600] "GET /forum/images/buttons/collapse_thead.gif HTTP/1.1" 200 580
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_global.js?v=387b1 HTTP/1.1" 200 26021
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387b1 HTTP/1.1" 200 36628
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/cron.php?s=1aab54cbe16d7d43d209e7ff35256809&rand=1298302807 HTTP/1.1" 200 43
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/misc/stats.gif HTTP/1.1" 200 1461
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/statusicon/forum_new.gif HTTP/1.1" 200 1623
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/misc/menu_open.gif HTTP/1.1" 200 279
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/gradients/gradient_tcat.gif HTTP/1.1" 200 3728
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/gradients/gradient_thead.gif HTTP/1.1" 200 3004
123.24.113.32 - - [21/Feb/2011:09:44:52 -0600] "GET / HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:44:58 -0600] "GET /forum/ HTTP/1.1" 200 6166
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_important.css?v= HTTP/1.1" 304 -123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_read_marker.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/yui/connection/connection-min.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_global.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_menu.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_md5.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:01 -0600] "GET /forum/cron.php?rand=1298303098 HTTP/1.1" 200 43

 
[Up] [Print Copy]
  [Question]   Đây là kiểu Ddos gì ? 22/02/2011 04:57:56 (+0700) | #2 | 231595
[Avatar]
conmale
Administrator

Joined: 07/05/2004 23:43:15
Messages: 9353
Location: down under
Offline
[Profile] [PM]

cutiblung wrote:
Mình sử dụng win2k3 vô web thấy không load được xem log thì như này:
Từ IP 123.24.113.32 nó cứ GET nhưng tại sao làm cho server không load được.Trên Fifox hiển thị máy chủ phản hồi quá lâu?Ping vẫn bình thường.Sau vài giây firewall block ip và lại bình thường.Anh em giúp giải thích và cùng phân tích nhé !

123.24.113.32 - - [21/Feb/2011:09:40:07 -0600] "GET /forum/ HTTP/1.1" 200 6251
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_important.css?v= HTTP/1.1" 200 1727
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_md5.js?v=387b1 HTTP/1.1" 200 5464
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_menu.js?v=387b1 HTTP/1.1" 200 9434
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_read_marker.js?v=387b1 HTTP/1.1" 200 3433
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/images/misc/vbulletin3_logo_white.gif HTTP/1.1" 200 12001
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/yui/connection/connection-min.js?v=387b1 HTTP/1.1" 200 11604
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/misc/navbits_start.gif HTTP/1.1" 200 1004
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/statusicon/forum_old.gif HTTP/1.1" 200 1628
123.24.113.32 - - [21/Feb/2011:09:40:09 -0600] "GET /forum/images/buttons/collapse_tcat.gif HTTP/1.1" 200 642
123.24.113.32 - - [21/Feb/2011:09:40:10 -0600] "GET /forum/images/misc/whos_online.gif HTTP/1.1" 200 1440
123.24.113.32 - - [21/Feb/2011:09:40:10 -0600] "GET /forum/images/buttons/collapse_thead.gif HTTP/1.1" 200 580
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/vbulletin_global.js?v=387b1 HTTP/1.1" 200 26021
123.24.113.32 - - [21/Feb/2011:09:40:08 -0600] "GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387b1 HTTP/1.1" 200 36628
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/cron.php?s=1aab54cbe16d7d43d209e7ff35256809&rand=1298302807 HTTP/1.1" 200 43
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/misc/stats.gif HTTP/1.1" 200 1461
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/statusicon/forum_new.gif HTTP/1.1" 200 1623
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/misc/menu_open.gif HTTP/1.1" 200 279
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/gradients/gradient_tcat.gif HTTP/1.1" 200 3728
123.24.113.32 - - [21/Feb/2011:09:40:12 -0600] "GET /forum/images/gradients/gradient_thead.gif HTTP/1.1" 200 3004
123.24.113.32 - - [21/Feb/2011:09:44:52 -0600] "GET / HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:44:58 -0600] "GET /forum/ HTTP/1.1" 200 6166
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_important.css?v= HTTP/1.1" 304 -123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_read_marker.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/yui/connection/connection-min.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_global.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_menu.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:00 -0600] "GET /forum/clientscript/vbulletin_md5.js?v=387b1 HTTP/1.1" 304 -
123.24.113.32 - - [21/Feb/2011:09:45:01 -0600] "GET /forum/cron.php?rand=1298303098 HTTP/1.1" 200 43

 
 


Chẳng phải ddos kiểu gì hết. Đây chỉ là một xuất truy cập hoàn toàn bình thường.
What bringing us together is stronger than what pulling us apart.
[Up] [Print Copy]
[digg] [delicious] [google] [yahoo] [technorati] [reddit] [stumbleupon]
Go to: 
 Users currently in here 
1 Anonymous

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|