高手请进，网站遭到恶意攻击，附上IIS日志

panjy 2006-10-10 09:57:25

最近我们的网站(http://www.fundxy.com)突然访问非常慢，查IIS日志发现有一个页面被大量访问，以下是几条IIS日志：

2006-10-06 00:00:19 W3SVC19 219.133.55.77 GET /fundxy/vip/CurveViewA1.aspx startdate=2002-08-28&enddate=2006-09-27&curvetype=1&fundidlist=050001|050006|160505|213001|240003|080001|161607|160602&shindex=false&szindex=false 80 - 60.210.229.108 NSPlayer/9.0.0.3250+WMFSDK/9.0 200 0 64
2006-10-06 00:00:23 W3SVC19 219.133.55.77 GET /fundxy/vip/CurveViewA1.aspx startdate=2002-08-28&enddate=2006-09-27&curvetype=1&fundidlist=050001|050006|160505|213001|240003|080001|161607|160602&shindex=false&szindex=false 80 - 61.186.75.88 NSPlayer/10.0.0.3646+WMFSDK/10.0 500 0 64
2006-10-06 00:00:23 W3SVC19 219.133.55.77 GET /fundxy/vip/CurveViewA1.aspx startdate=2002-08-28&enddate=2006-09-27&curvetype=1&fundidlist=050001|050006|160505|213001|240003|080001|161607|160602&shindex=false&szindex=false 80 - 218.27.59.205 NSPlayer/9.0.0.3250+WMFSDK/9.0 500 0 0
2006-10-06 00:00:23 W3SVC19 219.133.55.77 GET /fundxy/vip/CurveViewA1.aspx startdate=2002-08-28&enddate=2006-09-27&curvetype=1&fundidlist=050001|050006|160505|213001|240003|080001|161607|160602&shindex=false&szindex=false 80 - 219.147.9.186 NSPlayer/10.0.0.3646+WMFSDK/10.0 200 0 64

看得不是很明白，请大家帮助分析一下，谢谢！

...全文

359 5 打赏收藏转发到动态举报

写回复

用AI写文章

5 条回复

切换为时间正序

请发表友善的回复…

发表回复

panjy 2006-11-17

打赏
举报

结帖过程出错，分给了帖子没结帖？

panjy 2006-11-17

打赏
举报

是恶意攻击，后来在网站中警告后已经没有了，现在已经正常了。
谢谢大家的支持！

蒋晟 2006-10-25

打赏
举报

When a Windows Media Services 9 Series cache proxy server connects upstream to another version 9 or later server, it specifies WMCacheProxy as a user agent. It also passes the user agent of the original requesting client. The upstream server can discover the cache proxy user agent by examining the WMS_USER_AGENT attribute in the user context, and it can discover the user agent of the original requesting client by examining the
WMS_USER_PROXY_CLIENT_AGENT attribute. The origin server can use the user agent to identify whether the client is a player or a distribution server and impose limits accordingly. A server can specify limits by using the IWMSServerLimits interface or the IWMSPublishingPointLimits interface.

Note When a Windows Media Services 9 Series cache proxy server connects upstream to a version 4.1 server, it sends either NSPlayer or NSServer as a user agent depending on whether it is requesting, respectively, a client connection or a distribution connection.

zerolu 2006-10-25