WEB服务器被恶意攻击，求解决方案

[lir191]

以下为IIS日志
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2009-11-08 23:59:59 W3SVC889394405 121.10.112.149 GET /admin/reg/koufei2rd.asp UserId=00111781&WapId=88888888&Imei=&t=24523 80 - 211.136.115.9 - 404 0 2
2009-11-08 23:59:59 W3SVC889394405 121.10.112.149 GET /html/Article/meitu2/00139999_1.asp - 80 - 121.10.112.149 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-11-08 23:59:59 W3SVC889394405 121.10.112.149 GET /admin/reg/koufei2rd.asp UserId=00111781&WapId=88888888&Imei=&t=17540 80 - 211.139.163.168 - 404 0 2
2009-11-08 23:59:59 W3SVC889394405 121.10.112.149 GET /admin/reg/koufei2rd.asp UserId=00111781&WapId=88888888&Imei=&t=54366 80 - 218.205.237.42 - 404 0 2
2009-11-08 23:59:59 W3SVC889394405 121.10.112.149 GET /admin/reg/koufei2rd.asp UserId=00111781&WapId=88888888&Imei=&t=86703 80 - 211.138.5.36 - 404 0 2

[phoenixYiYou]

通过日志，你不是已经看到攻击你服务器的ip,接下来你只要在硬件或软件防火墙设置禁止这个ip就可以了！呵呵！