求助,流量莫名增加,虚拟主机日志大量访问信息。
微笑的水 2010-08-17 04:07:32 小弟的一个网站,虚拟主机流量连续两个月彪红,10G的流量。能被一个资源10MB的网站不到一个月就刷完,我很困惑。查看访问情况,发现正常访问并没有多少。充斥大量的
125.224.198.145 - - [16/Aug/2010:02:11:26 +0800] "CONNECT 122.147.132.148:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:30 +0800] "CONNECT 74.125.157.27:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:11:32 +0800] "CONNECT 168.95.6.126:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:34 +0800] "CONNECT 211.20.188.150:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:37 +0800] "CONNECT 17.148.17.2:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:43 +0800] "CONNECT 210.242.14.185:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:11:50 +0800] "CONNECT 203.188.197.10:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:11:51 +0800] "CONNECT 168.95.6.122:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:52 +0800] "CONNECT 211.20.188.150:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:11:54 +0800] "CONNECT 72.14.213.27:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:58 +0800] "CONNECT 163.32.83.96:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:11:58 +0800] "CONNECT 203.188.197.10:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:11:59 +0800] "CONNECT 168.95.6.136:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:12:00 +0800] "CONNECT 65.55.92.168:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:12:04 +0800] "CONNECT 168.95.6.149:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:12:04 +0800] "CONNECT 140.112.8.5:25 HTTP/1.0" 200 23066 "-" "-"
203.186.54.108 - - [16/Aug/2010:02:12:07 +0800] "CONNECT 203.217.96.52:25 HTTP/1.0" 200 23066 "-" "-"
125.224.198.145 - - [16/Aug/2010:02:12:07 +0800] "CONNECT 65.54.188.72:25 HTTP/1.0" 200 23066 "-" "-"
开头的IP总是那固定的五六个。
我做了个实验,周六的时候将ftp所有文件全部删除,结果周一再看竟然发生了200多兆的流量。我与主机提供商交涉,他们就说没有问题,帮忙检查和防护。还给续赠了10G的流量。
现在问题依旧。我在网站首页放了个没有防刷新机制的计数器,一周了只蹦到35,而且有6个是我自己刷的。可是这一周走了2个多G的流量,日志也都是那些东西。
我的问题是,这个主机是不是做邮件代理了。这东西是谁做的,里面到底有什么猫腻???