硬件防火墙销售 Apache 遭遇DDOS攻击!!!!!!!!!!
2011年09月30日
Apache 遭遇DDOS攻击!!!!!!!!!!
您还未登录 ! 我的应用 登录 注册 问答首页→ 入门讨论→ 入门技术 Apache 遭遇DDOS攻击!!!!!!!!!! 悬赏：10 发布时间：2009-01-05 提问人：webeasymail (初级程序员) > 猎头职位: ??? 这几天遭遇DDos攻击，导致应用无法访问，可能的攻击方式是DDOS中的SYN FLOOD，配置了硬件防火墙以后基本上可以访问，但是每天还是有同样的攻击，9个小时的Apache产生的日志是200多万，奇怪的是Apache的日志记录的全部是别的网站的URL，并不是我们公司应用的URL（猜想是不是apache的配置有问题，导致Apache成了一个代理服务）。?以下是在百度上找的对syn flood的描述：SYN Flood是当前最流行的DoS（拒绝服务攻击）与DdoS（分布式拒绝服务攻击）的方式之一，这是一种利用TCP协议缺陷，发送大量伪造的TCP连接请求，从而使得被攻击方资源耗尽（CPU满负荷或内存不足）的攻击方式。?但是我们服务器并不是这个情况，服务上的CPU和内存根本只用了一点点，Apache却不能访问（怀疑Apache配置上出现了问题），配置了硬件防火墙以后Syn_recv只有70多个了，没有配置前250多个。??目前主要遇到的问题是：?1、Apache为什么会产生这样的日志？是Apache配置出现了问题，还是这种攻击方式就会产生这样的日志，为什么每条日志都有自己的状态？感觉Apache去访问了这个连接，并且得到这个连接的状态（事实上返回200的是可以访问，返回404的不可以访问，用浏览器做的测试），应该如何解决这样的问题？？?2、为什么SYN_RECV到250个请求左右Apache就不能正常访问了，是Apache配置不合理吗？还是和这种攻击的方式有关系，还是其他原因？？？?3、为什么我们服务器没有达到CPU满负荷或内存不足就就就不能正常访问了？？??因为没有遇到过这样的问题，所以问题问的比较幼稚，请各位同仁谅解！??--------------------------------------附带相关的apache日志和服务器配置---------------------------------------?公司的配置如下： 最前段硬件防火墙->WEB服务器->应用服务器等等(内网).?WEB服务器采用的是Apache2.2.8 ,操作系统是openSUSE,服务器配置是：至强2.0双核2CPU,内存4G。?配置防火墙后OPENSUSE用netstat统计的结果(配置前Syn_recv有250多个)： 17 LAST_ACK 71 CLOSING 71 SYN_RECV 95 CLOSE_WAIT 168 FIN_WAIT2 219 FIN_WAIT1 461 ESTABLISHED 1344 TIME_WAIT???Apache的主要配置：?ServerTokens ProdServerSignature OffHostnameLookups Offinclude conf/website.conf# preforkStartServers 50MinSpareServers 50MaxSpareServers 200ServerLimit 1000MaxClients 1000MaxRequestsPerChild 5000Order deny,allowDeny from allOrder deny,allowDeny from allNameVirtualHost *:80 ProxyRequests On DocumentRoot /opt/project ServerName 192.168.1.103 ServerAlias 192.168.1.105 DirectoryIndex index.action ProxyPass /pic/ http://192.168.1.101/ ProxyPass /report/ http://192.168.1.101:8081/report/ ProxyPass / balancer://proxy/ stickysession=JSESSIONID BalancerMember ajp://192.168.1.103:10003/ route=A loadfactor=1 BalancerMember ajp://192.168.1.103:20003/ route=B loadfactor=1 BalancerMember ajp://192.168.1.101:10003/ route=C loadfactor=1 BalancerMember ajp://192.168.1.101:20003/ route=D loadfactor=1 ErrorLog logs/error_log.log CustomLog "|/usr/local/httpd/bin/rotatelogs /usr/local/httpd/logs/access_%Y_%m_%d.log 86400 480" combined env=!僵尸ddos 天龙八部天龙寺全4石头咋上NB要攻高PK牛逼的最好是高血高攻高防高会心高命中高高闪避的dontlogHostnameLookups Off????Apache产生的访问日志：?222.217.221.167 - - [04/Jan/2009:17:33:48 +0800] "GET http://cpro.baidu.com/cpro/ui/cp.js HTTP/1.0" 200 3637 "http://www.1ting.com/player/c2/player_123383.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705; Alexa Toolbar)"119.118.41.203 - - [04/Jan/2009:17:33:48 +0800] "GET http://s.baidu.com/w.gif?q=??576926178&fm=as&F =779717EA&T=1231061627&title=碳烤鸭炉%20QQ576926178%20-%20商道&url=http://www.soodot.com/supply2/detail/info.asp x?itemname=%CF%FA%CA%DB&id=1453788&p1=2&y=D968C5F2& path=http://www.baidu.com/s?ie=gb2312&bs=??&sr= &z=&cl=3&f=8&wd=??576926178&ct=0&t=123106165178 1 HTTP/1.0" 200 - "http://www.baidu.com/s?ie=gb2312&bs=??&sr=&z= &cl=3&f=8&wd=??576926178&ct=0" "Opera/9.20 (Windows NT 5.1; U)"194.110.162.20 - - [04/Jan/2009:17:33:48 +0800] "POST http://www.95web.cn/guestbook/add.asp HTTP/1.1" 200 2724 "http://www.95web.cn/guestbook/index.asp?page=147" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"218.6.15.10 - - [04/Jan/2009:17:33:48 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"194.110.162.20 - - [04/Jan/2009:17:33:48 +0800] "POST http://blog.czin.cn/index.php?file=guestbook&uid=3 &page=1 HTTP/1.1" 400 39 "http://blog.czin.cn/index.php?file=guestbook&uid= 3&page=1" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"69.205.55.200 - - [04/Jan/2009:17:33:48 +0800] "GET http://209.73.169.10/config/pwtoken_get?login=blue +charm&src=ygodgw&passwd=512b993730709ca25d72911333 b159ce&challenge=IOSKhNsqHuPFM52X6g66kDdfUfwF&md5=1 HTTP/1.0" 200 6 "-" "MobileRunner-J2ME"216.150.79.194 - - [04/Jan/2009:17:33:48 +0800] "CONNECT 205.188.153.249:443 HTTP/1.0" 502 232 "-" "Mozilla/4.00 (ICQ)"222.216.28.191 - - [04/Jan/2009:17:33:49 +0800] "GET http://cpro.baidu.com/cpro/ui/cp.js HTTP/1.0" 200 3637 "http://www.ey999.com/zhaoshang/zs_info.html?city= \xb8\xca\xcb\xe0" "Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)"218.6.15.10 - - [04/Jan/2009:17:33:48 +0800] "GET http://images.cashfiesta.com/images/boat.gif HTTP/1.0" 200 875 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"62.195.233.232 - - [04/Jan/2009:17:33:49 +0800] "POST http://sushi4.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin HTTP/1.1" 502 519 "-" "-"221.221.71.187 - - [04/Jan/2009:17:33:48 +0800] "GET http://www.baidu.com/s?wd=v8 HTTP/1.0" 200 18151 "http://www.baidu.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"116.21.64.58 - - [04/Jan/2009:17:33:48 +0800] "GET http://incentreward.directtrack.com/42/247/22056/ HTTP/1.1" 301 - "http://www.searchtheweb.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"116.21.64.58 - - [04/Jan/2009:17:33:49 +0800] "GET http://img.directtrack.com/incentreward/22056.gif HTTP/1.1" 200 6952 "http://www.searchtheweb.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:49 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"66.152.184.2 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.seek-tutor.info/Troop.htm HTTP/1.1" 502 460 "http://www.varietygamble.com/casinowebsite10.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M)"206.51.238.2 - - [04/Jan/2009:17:33:49 +0800] "POST http://goose308.info/proxyspitb/CheckProxy.php HTTP/1.0" 200 86 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"72.36.152.138 - - [04/Jan/2009:17:33:49 +0800] "GET http://kh.g-share.com/khcom/cgi-bin/capture/wforum .cgi HTTP/1.1" 302 270 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"69.65.3.106 - - [04/Jan/2009:17:33:49 +0800] "GET http://209.73.169.4/config/pwtoken_get?login=_jann eb_&src=ygodgw&passwd=8e9d1dcf1d543cc143bc0457c92a9 f7e&challenge=1Ib8tqorHuNqakTcL8E09tz4bGbe&md5=1 HTTP/1.0" 200 6 "-" "MobileRunner-J2ME"74.15.31.134 - - [04/Jan/2009:17:33:48 +0800] "GET http://www.palcomix.com/jadechan5/page26.html HTTP/1.1" 200 491 "http://www.palcomix.com/jadechan5/page27.html" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12"62.221.89.30 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"86.198.125.155 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.spot-bourse.com/TRADE.php HTTP/1.0" 200 449 "http://www.spot-bourse.com/REGIE_PUB/REGIE.php" "Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC)"91.185.51.109 - - [04/Jan/2009:17:33:49 +0800] "POST http://searchauto.us/ccc/CheckProxy.php HTTP/1.0" 200 86 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:49 +0800] "GET http://images.cashfiesta.com/images/boat.gif HTTP/1.0" 200 875 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"221.195.73.86 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.arcadebanners.com/banners.php?accessc=1 221634865 HTTP/1.0" 200 305 "http://freepro.net/online-games/Miscellaneous/pla y-A-Sweet-Couple.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 6.1; SV1; InfoPath.1; .NET CLR 2.0.50727)"94.27.110.113 - - [04/Jan/2009:17:33:49 +0800] "GET http://shoestore-c22.ods.org/and1-jump-start-mid-m ens-blackblacksilver.htm HTTP/1.0" 404 197 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))"204.9.184.208 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.designertoday.com/ HTTP/1.1" 403 1853 "http://www.varietygamble.com/on-line-casino3.html " "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; KITV4.7 Wanadoo)"99.154.212.49 - - [04/Jan/2009:17:33:48 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"58.188.163.181 - - [04/Jan/2009:17:33:50 +0800] "GET http://stat.youku.com/player/addPlayerDurationRepo rt?winType=1&Type=0&rnd=2195023&source=video&number =60&cs=2069|2082|2074&ct=d&videoid=2107652&viewUser Id=0&videoOwnerId=1810279&sid=123105947098419848816 HTTP/1.1" 200 - "http://static.youku.com/v1.0.0379/v/swf/qplayer.s wf" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; Dealio Toolbar 3.4)"87.118.118.23 - - [04/Jan/2009:17:33:49 +0800] "POST http://87.118.118.23/poster/proxy.php HTTP/1.1" 200 1208 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"62.141.52.219 - - [04/Jan/2009:17:33:49 +0800] "GET http://sevy.eu.org/azenv.php HTTP/1.1" 200 564 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:50 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"119.125.82.206 - - [04/Jan/2009:17:33:50 +0800] "GET http://getrefmails.com/scripts/runner.php?IM=5400e aeb1866. HTTP/1.1" 200 1600 "http://www.getrefmails.com/pages/inbox.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Foxy/1)"87.173.205.61 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.proxyjudge.biz/az.php HTTP/1.1" 200 797 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20060212 Fedora/1.7.12-5"38.100.202.165 - - [04/Jan/2009:17:33:49 +0800] "GET http://aaiv.sekkal.com/phpBB2/viewtopic.php?p=2719 4 HTTP/1.1" 502 479 "http://www.varietygamble.com/englishharbour-downl oad-casinos.html" "Mozilla/4.0 (compatible; MSIE 5.0; YANDEX)"78.132.158.186 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"221.195.73.86 - - [04/Jan/2009:17:33:50 +0800] "GET http://www.arcadebanners.com/displaybanners.php?p= 1221634865 HTTP/1.0" 200 407 "http://freepro.net/online-games/Miscellaneous/pla y-A-Sweet-Couple.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 6.1; SV1; InfoPath.1; .NET CLR 2.0.50727)"202.177.109.205 - - [04/Jan/2009:17:33:50 +0800] "GET http://xml.affiliate.rakuten.co.jp/link/img/line01 .gif HTTP/1.0" 200 44 "http://xml.affiliate.rakuten.co.jp/?type=js&servi ce=ranking&hash=01eb6a6c.85cce186&theme=all&num=3&s c=1&p=0_14_B4B5D7_000000_FFFFFF_000099_000000_1&tit le=Rakuten Ranking" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; i-NavFourF)"67.205.74.207 - - [04/Jan/2009:17:33:49 +0800] "POST http://cssvault.com/gallery/villa_hotel_tamara HTTP/1.1" 302 - "http://cssvault.com/gallery/villa_hotel_tamara" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)"123.181.19.175 - - [04/Jan/2009:17:33:50 +0800] "GET http://squidclick.bbs.tianya.cn/new/tianyaarticlec lick/publicforumarticleclick.asp?stritem=no04&idart icle=749321 HTTP/1.1" 200 - "http://cache.tianya.cn/publicforum/content/no04/1 /749321.shtml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)"204.9.184.212 - - [04/Jan/2009:17:33:50 +0800] "GET http://www.vidfreeblog.com/2006/11/01/a-life-exten ding-pill/ HTTP/1.1" 502 508 "http://www.varietygamble.com/play-www-tuttocasino -com-for-fun.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"218.4.192.114 - - [04/Jan/2009:17:33:49 +0800] "CONNECT 205.188.153.97:443 HTTP/1.0" 200 - "-" "-"217.197.113.41 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"????Apache产生的错误日志：?[Sun Jan 04 17:33:49 2009] [error] (111)Connection refused: proxy: CONNECT: attempt to connect to 205.188.153.249:443 (205.188.153.249) failed[Sun Jan 04 17:33:49 2009] [error] [client 62.195.233.232] proxy: DNS lookup failure for: sushi4.mobile.sp1.yahoo.com returned by http://sushi4.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:49 2009] [error] [client 66.152.184.2] proxy: DNS lookup failure for: www.seek-tutor.info returned by http://www.seek-tutor.info/Troop.htm, referer: http://www.varietygamble.com/casinowebsite10.html[ Sun Jan 04 17:33:50 2009] [error] [client 38.100.202.165] (104)Connection reset by peer: proxy: error reading status line from remote server aaiv.sekkal.com, referer: http://www.varietygamble.com/englishharbour-downlo ad-casinos.html[Sun Jan 04 17:33:50 2009] [error] [client 38.100.202.165] proxy: Error reading from remote server returned by http://aaiv.sekkal.com/phpBB2/viewtopic.php?p=2719 4, referer: http://www.varietygamble.com/englishharbour-downlo ad-casinos.html[Sun Jan 04 17:33:50 2009] [error] [client 204.9.184.212] proxy: DNS lookup failure for: www.vidfreeblog.com returned by http://www.vidfreeblog.com/2006/11/01/a-life-exten ding-pill/, referer: http://www.varietygamble.com/play-www-tuttocasino- com-for-fun.html[Sun Jan 04 17:33:50 2009] [error] [client 62.195.233.232] (70014)End of file found: proxy: error reading status line from remote server sushi6.mobile.ch1.yahoo.com[Sun Jan 04 17:33:50 2009] [error] [client 62.195.233.232] proxy: Error reading from remote server returned by http://sushi6.mobile.ch1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:52 2009] [error] [client 74.52.43.202] request failed: URI too long (longer than 8190)[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 219.94.180.95:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.151.120.22:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.242:443 (205.188.153.242) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 140.99.107.111:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 150.70.4.97:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] [client 62.195.233.232] proxy: DNS lookup failure for: sushi7.mobile.sp1.yahoo.com returned by http://sushi7.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:54 2009] [error] [client 74.52.50.178] request failed: URI too long (longer than 8190)[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 68.178.254.18:80 (*) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.98:443 (205.188.153.98) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.43.196.73:80 (*) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 213.186.33.18:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.72.54.22:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 72.14.253.19:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] [client 123.195.222.251] proxy: DNS lookup failure for: l09.member.tpe.yahoo.com returned by http://l09.member.tpe.yahoo.com/config/isp_verify_ user?l=pax&p=titi[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.242:443 (205.188.153.242) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 211.13.204.3:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 221.231.148.193:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (111)Connection refused: proxy: CONNECT: attempt to connect to 205.188.153.249:443 (205.188.153.249) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 69.64.147.15:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 64.233.167.19:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 124.38.187.117:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 217.26.52.36:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] [client 62.195.233.232] (70014)End of file found: proxy: error reading status line from remote server sushi5.mobile.ch1.yahoo.com[Sun Jan 04 17:33:58 2009] [error] [client 62.195.233.232] proxy: Error reading from remote server returned by http://sushi5.mobile.ch1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.191.112.51:80 (*) failed[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 124.37.25.217:80 (*) failed[Sun Jan 04 17:33:59 2009] [error] [client 84.16.227.88] proxy: URI cannot be parsed: http://[sddns3.cncmax.cn:8080?host=www.asuzhou.com .cn&r=]/postreply.aspx&topicid=56&postid=103"e=yes returned by http://sddns3.cncmax.cn:8080?HOST=www.asuzhou.com. cn&R=/postreply.aspx&topicid=56&postid=103"e=yes, referer: http://www.asuzhou.com.cn/postreply.aspx?topicid=5 6&postid=103"e=yes[Sun Jan 04 17:33:59 2009] [error] [client 204.9.184.199] proxy: DNS lookup failure for: www.rebugnie.org returned by http://www.rebugnie.org/Opportunity-Seeker-Busines s-On-Ebay.html, referer: http://www.varietygamble.com/www-riverbellecasino- com-games-list.html[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 81.169.169.108:80 (*) failed[Sun Jan 04 17:34:00 2009] [error] [client 83.133.126.181] proxy: DNS lookup failure for: carcover4.info returned by http://carcover4.info/Thursday.htm, referer: http://www.varietygamble.com/sportsbook-casinos.ht ml[Sun Jan 04 17:34:00 2009] [error] [client 61.45.26.158] (104)Connection reset by peer: proxy: error reading status line from remote server ranks1.apserver.net, referer: http://www.myblossom.net/tumama/index.php[Sun Jan 04 17:34:00 2009] [error] [client 61.45.26.158] proxy: Error reading from remote server returned by http://ranks1.apserver.net/share/in.php?u=mouse3&i d=tumama02, referer: http://www.myblossom.net/tumama/index.php[Sun Jan 04 17:34:00 2009] [warn] proxy: Ignoring bogus HTTP header returned by http://www.ochanomizushobo.co.jp/cgi-bin/menu.cgi? ISBN=978-4-275-00592-2 (GET)[Sun Jan 04 17:34:01 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.191.112.59:80 (*) failed[Sun Jan 04 17:34:01 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 72.14.215.83:80 (*) failed????? 该问题已经关闭: 超过15天由系统自动关闭，悬赏平分给所有参与回答的会员 问题答案可能在这里→ 寻找更多解答 使用php充当shell脚本 用java httpclient模拟登录 获取163邮箱联系人 多线程断点续传 文件上传遇到诡异问题，lighttpd不能正确转发，返回一个http 301，
Robbin好像提到过 求脚本，python处理文件 回答 你把所有的虚拟主机都配置进来了。限定成你们domain吧。 sdh5724 (资深程序员) 2009-01-05 待解决问题数: 562 已解决问题数: 19420 已关闭问题数: 47828 问答分类 Java编程和Java企业应用 Java综合 企业应用 Struts Hibernate Spring Tomcat OO Swing JBoss 设计模式 SOA iBATIS DAO 领域模型 Web前端技术 EXT JavaScript Web综合 JQuery AJAX DWR CSS GWT UI dojo prototype JavaFX YUI 移动编程和手机应用开发 Android J2ME iPhone 移动综合 WAP Symbian BlackBerry Maemo Palm C/C++编程 C++ C D语言 Ruby编程 rails ruby Python编程 python django GAE PHP编程 PHP Flash编程和RIA Flex Flash ActionScript AIR Microsoft .Net C# .net ASP.net Windows Windows Mobile WPF SilverLight 综合技术 Database oracle 编程综合 Linux mysql 数据结构和算法 SQLServer OS DB2 Erlang Unix FP MacOSX Haskell PostgreSQL 入门讨论 入门技术 IT厂商 软件开发和项目管理 项目管理 配置管理 软件测试 敏捷开发 UML 单元测试 TDD UseCase XP CMM UP 行业应用 互联网 网络应用 电信 咨询 金融 电子政务 搜索引擎 教育 物流 制造 嵌入式 SAAS 网游 浏览器 交通 医疗 招聘求职 职场话题 求职经验 企业点评 招聘职位 面试秘籍 海阔天空 工作 生活 JavaEye IT八卦 读书 公告 IT资讯 情感 大众软件 大众硬件 申诉 游戏 活动 笑话 理财 影视 体育 旅游 音乐 答题高手 lovewhzlq CTO ( 1252 - 13930 ) yourgame CTO ( 570 - 5183 ) 蔡华江 资深架构师 ( 323 - 3392 ) xiaolongfeixiang 资深架构师 ( 301 - 2994 ) atian25 架构师 ( 253 - 2329 ) myali88 资深架构师 ( 239 - 2685 ) suziwen 资深架构师 ( 205 - 2423 ) Anddy 架构师 ( 193 - 2155 ) lizhi92574 架构师 ( 192 - 2061 ) 7454103 资深架构师 ( 189 - 2505 ) 查看全部排名>> 问题频道帮助 提问的智慧 如何获得积分及等级说明 如何关闭问题 首页 资讯 精华 论坛 问答 博客 群组 招聘 搜索 招贤纳士 广告服务 ITeye黑板报 联系我们 友情链接 ?? 2003-2011 ITeye.com. [ 京ICP证110151号 ]
2011年09月30日
Apache 遭遇DDOS攻击!!!!!!!!!!
您还未登录 ! 我的应用 登录 注册 问答首页→ 入门讨论→ 入门技术 Apache 遭遇DDOS攻击!!!!!!!!!! 悬赏：10 发布时间：2009-01-05 提问人：webeasymail (初级程序员) > 猎头职位: ??? 这几天遭遇DDos攻击，导致应用无法访问，可能的攻击方式是DDOS中的SYN FLOOD，配置了硬件防火墙以后基本上可以访问，但是每天还是有同样的攻击，9个小时的Apache产生的日志是200多万，奇怪的是Apache的日志记录的全部是别的网站的URL，并不是我们公司应用的URL（猜想是不是apache的配置有问题，导致Apache成了一个代理服务）。?以下是在百度上找的对syn flood的描述：SYN Flood是当前最流行的DoS（拒绝服务攻击）与DdoS（分布式拒绝服务攻击）的方式之一，这是一种利用TCP协议缺陷，发送大量伪造的TCP连接请求，从而使得被攻击方资源耗尽（CPU满负荷或内存不足）的攻击方式。?但是我们服务器并不是这个情况，服务上的CPU和内存根本只用了一点点，Apache却不能访问（怀疑Apache配置上出现了问题），配置了硬件防火墙以后Syn_recv只有70多个了，没有配置前250多个。??目前主要遇到的问题是：?1、Apache为什么会产生这样的日志？是Apache配置出现了问题，还是这种攻击方式就会产生这样的日志，为什么每条日志都有自己的状态？感觉Apache去访问了这个连接，并且得到这个连接的状态（事实上返回200的是可以访问，返回404的不可以访问，用浏览器做的测试），应该如何解决这样的问题？？?2、为什么SYN_RECV到250个请求左右Apache就不能正常访问了，是Apache配置不合理吗？还是和这种攻击的方式有关系，还是其他原因？？？?3、为什么我们服务器没有达到CPU满负荷或内存不足就就就不能正常访问了？？??因为没有遇到过这样的问题，所以问题问的比较幼稚，请各位同仁谅解！??--------------------------------------附带相关的apache日志和服务器配置---------------------------------------?公司的配置如下： 最前段硬件防火墙->WEB服务器->应用服务器等等(内网).?WEB服务器采用的是Apache2.2.8 ,操作系统是openSUSE,服务器配置是：至强2.0双核2CPU,内存4G。?配置防火墙后OPENSUSE用netstat统计的结果(配置前Syn_recv有250多个)： 17 LAST_ACK 71 CLOSING 71 SYN_RECV 95 CLOSE_WAIT 168 FIN_WAIT2 219 FIN_WAIT1 461 ESTABLISHED 1344 TIME_WAIT???Apache的主要配置：?ServerTokens ProdServerSignature OffHostnameLookups Offinclude conf/website.conf# preforkStartServers 50MinSpareServers 50MaxSpareServers 200ServerLimit 1000MaxClients 1000MaxRequestsPerChild 5000Order deny,allowDeny from allOrder deny,allowDeny from allNameVirtualHost *:80 ProxyRequests On DocumentRoot /opt/project ServerName 192.168.1.103 ServerAlias 192.168.1.105 DirectoryIndex index.action ProxyPass /pic/ http://192.168.1.101/ ProxyPass /report/ http://192.168.1.101:8081/report/ ProxyPass / balancer://proxy/ stickysession=JSESSIONID BalancerMember ajp://192.168.1.103:10003/ route=A loadfactor=1 BalancerMember ajp://192.168.1.103:20003/ route=B loadfactor=1 BalancerMember ajp://192.168.1.101:10003/ route=C loadfactor=1 BalancerMember ajp://192.168.1.101:20003/ route=D loadfactor=1 ErrorLog logs/error_log.log CustomLog "|/usr/local/httpd/bin/rotatelogs /usr/local/httpd/logs/access_%Y_%m_%d.log 86400 480" combined env=!僵尸ddos 天龙八部天龙寺全4石头咋上NB要攻高PK牛逼的最好是高血高攻高防高会心高命中高高闪避的dontlogHostnameLookups Off????Apache产生的访问日志：?222.217.221.167 - - [04/Jan/2009:17:33:48 +0800] "GET http://cpro.baidu.com/cpro/ui/cp.js HTTP/1.0" 200 3637 "http://www.1ting.com/player/c2/player_123383.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705; Alexa Toolbar)"119.118.41.203 - - [04/Jan/2009:17:33:48 +0800] "GET http://s.baidu.com/w.gif?q=??576926178&fm=as&F =779717EA&T=1231061627&title=碳烤鸭炉%20QQ576926178%20-%20商道&url=http://www.soodot.com/supply2/detail/info.asp x?itemname=%CF%FA%CA%DB&id=1453788&p1=2&y=D968C5F2& path=http://www.baidu.com/s?ie=gb2312&bs=??&sr= &z=&cl=3&f=8&wd=??576926178&ct=0&t=123106165178 1 HTTP/1.0" 200 - "http://www.baidu.com/s?ie=gb2312&bs=??&sr=&z= &cl=3&f=8&wd=??576926178&ct=0" "Opera/9.20 (Windows NT 5.1; U)"194.110.162.20 - - [04/Jan/2009:17:33:48 +0800] "POST http://www.95web.cn/guestbook/add.asp HTTP/1.1" 200 2724 "http://www.95web.cn/guestbook/index.asp?page=147" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"218.6.15.10 - - [04/Jan/2009:17:33:48 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"194.110.162.20 - - [04/Jan/2009:17:33:48 +0800] "POST http://blog.czin.cn/index.php?file=guestbook&uid=3 &page=1 HTTP/1.1" 400 39 "http://blog.czin.cn/index.php?file=guestbook&uid= 3&page=1" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"69.205.55.200 - - [04/Jan/2009:17:33:48 +0800] "GET http://209.73.169.10/config/pwtoken_get?login=blue +charm&src=ygodgw&passwd=512b993730709ca25d72911333 b159ce&challenge=IOSKhNsqHuPFM52X6g66kDdfUfwF&md5=1 HTTP/1.0" 200 6 "-" "MobileRunner-J2ME"216.150.79.194 - - [04/Jan/2009:17:33:48 +0800] "CONNECT 205.188.153.249:443 HTTP/1.0" 502 232 "-" "Mozilla/4.00 (ICQ)"222.216.28.191 - - [04/Jan/2009:17:33:49 +0800] "GET http://cpro.baidu.com/cpro/ui/cp.js HTTP/1.0" 200 3637 "http://www.ey999.com/zhaoshang/zs_info.html?city= \xb8\xca\xcb\xe0" "Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)"218.6.15.10 - - [04/Jan/2009:17:33:48 +0800] "GET http://images.cashfiesta.com/images/boat.gif HTTP/1.0" 200 875 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"62.195.233.232 - - [04/Jan/2009:17:33:49 +0800] "POST http://sushi4.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin HTTP/1.1" 502 519 "-" "-"221.221.71.187 - - [04/Jan/2009:17:33:48 +0800] "GET http://www.baidu.com/s?wd=v8 HTTP/1.0" 200 18151 "http://www.baidu.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"116.21.64.58 - - [04/Jan/2009:17:33:48 +0800] "GET http://incentreward.directtrack.com/42/247/22056/ HTTP/1.1" 301 - "http://www.searchtheweb.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"116.21.64.58 - - [04/Jan/2009:17:33:49 +0800] "GET http://img.directtrack.com/incentreward/22056.gif HTTP/1.1" 200 6952 "http://www.searchtheweb.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:49 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"66.152.184.2 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.seek-tutor.info/Troop.htm HTTP/1.1" 502 460 "http://www.varietygamble.com/casinowebsite10.html " "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M)"206.51.238.2 - - [04/Jan/2009:17:33:49 +0800] "POST http://goose308.info/proxyspitb/CheckProxy.php HTTP/1.0" 200 86 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"72.36.152.138 - - [04/Jan/2009:17:33:49 +0800] "GET http://kh.g-share.com/khcom/cgi-bin/capture/wforum .cgi HTTP/1.1" 302 270 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"69.65.3.106 - - [04/Jan/2009:17:33:49 +0800] "GET http://209.73.169.4/config/pwtoken_get?login=_jann eb_&src=ygodgw&passwd=8e9d1dcf1d543cc143bc0457c92a9 f7e&challenge=1Ib8tqorHuNqakTcL8E09tz4bGbe&md5=1 HTTP/1.0" 200 6 "-" "MobileRunner-J2ME"74.15.31.134 - - [04/Jan/2009:17:33:48 +0800] "GET http://www.palcomix.com/jadechan5/page26.html HTTP/1.1" 200 491 "http://www.palcomix.com/jadechan5/page27.html" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12"62.221.89.30 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"86.198.125.155 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.spot-bourse.com/TRADE.php HTTP/1.0" 200 449 "http://www.spot-bourse.com/REGIE_PUB/REGIE.php" "Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC)"91.185.51.109 - - [04/Jan/2009:17:33:49 +0800] "POST http://searchauto.us/ccc/CheckProxy.php HTTP/1.0" 200 86 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:49 +0800] "GET http://images.cashfiesta.com/images/boat.gif HTTP/1.0" 200 875 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"221.195.73.86 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.arcadebanners.com/banners.php?accessc=1 221634865 HTTP/1.0" 200 305 "http://freepro.net/online-games/Miscellaneous/pla y-A-Sweet-Couple.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 6.1; SV1; InfoPath.1; .NET CLR 2.0.50727)"94.27.110.113 - - [04/Jan/2009:17:33:49 +0800] "GET http://shoestore-c22.ods.org/and1-jump-start-mid-m ens-blackblacksilver.htm HTTP/1.0" 404 197 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))"204.9.184.208 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.designertoday.com/ HTTP/1.1" 403 1853 "http://www.varietygamble.com/on-line-casino3.html " "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; KITV4.7 Wanadoo)"99.154.212.49 - - [04/Jan/2009:17:33:48 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"58.188.163.181 - - [04/Jan/2009:17:33:50 +0800] "GET http://stat.youku.com/player/addPlayerDurationRepo rt?winType=1&Type=0&rnd=2195023&source=video&number =60&cs=2069|2082|2074&ct=d&videoid=2107652&viewUser Id=0&videoOwnerId=1810279&sid=123105947098419848816 HTTP/1.1" 200 - "http://static.youku.com/v1.0.0379/v/swf/qplayer.s wf" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; Dealio Toolbar 3.4)"87.118.118.23 - - [04/Jan/2009:17:33:49 +0800] "POST http://87.118.118.23/poster/proxy.php HTTP/1.1" 200 1208 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"62.141.52.219 - - [04/Jan/2009:17:33:49 +0800] "GET http://sevy.eu.org/azenv.php HTTP/1.1" 200 564 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"218.6.15.10 - - [04/Jan/2009:17:33:50 +0800] "GET http://images.cashfiesta.com/images/template/s.gif HTTP/1.0" 200 43 "http://www.cashfiesta.com/php/join.php?campaign=1 08&subid=cd1034&uid=697&utm_source=&utm_medium=CPL& utm_campaign=108" "Mozilla/4.08 [en] (WinNT; U)"119.125.82.206 - - [04/Jan/2009:17:33:50 +0800] "GET http://getrefmails.com/scripts/runner.php?IM=5400e aeb1866. HTTP/1.1" 200 1600 "http://www.getrefmails.com/pages/inbox.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Foxy/1)"87.173.205.61 - - [04/Jan/2009:17:33:49 +0800] "GET http://www.proxyjudge.biz/az.php HTTP/1.1" 200 797 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20060212 Fedora/1.7.12-5"38.100.202.165 - - [04/Jan/2009:17:33:49 +0800] "GET http://aaiv.sekkal.com/phpBB2/viewtopic.php?p=2719 4 HTTP/1.1" 502 479 "http://www.varietygamble.com/englishharbour-downl oad-casinos.html" "Mozilla/4.0 (compatible; MSIE 5.0; YANDEX)"78.132.158.186 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"221.195.73.86 - - [04/Jan/2009:17:33:50 +0800] "GET http://www.arcadebanners.com/displaybanners.php?p= 1221634865 HTTP/1.0" 200 407 "http://freepro.net/online-games/Miscellaneous/pla y-A-Sweet-Couple.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 6.1; SV1; InfoPath.1; .NET CLR 2.0.50727)"202.177.109.205 - - [04/Jan/2009:17:33:50 +0800] "GET http://xml.affiliate.rakuten.co.jp/link/img/line01 .gif HTTP/1.0" 200 44 "http://xml.affiliate.rakuten.co.jp/?type=js&servi ce=ranking&hash=01eb6a6c.85cce186&theme=all&num=3&s c=1&p=0_14_B4B5D7_000000_FFFFFF_000099_000000_1&tit le=Rakuten Ranking" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; i-NavFourF)"67.205.74.207 - - [04/Jan/2009:17:33:49 +0800] "POST http://cssvault.com/gallery/villa_hotel_tamara HTTP/1.1" 302 - "http://cssvault.com/gallery/villa_hotel_tamara" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)"123.181.19.175 - - [04/Jan/2009:17:33:50 +0800] "GET http://squidclick.bbs.tianya.cn/new/tianyaarticlec lick/publicforumarticleclick.asp?stritem=no04&idart icle=749321 HTTP/1.1" 200 - "http://cache.tianya.cn/publicforum/content/no04/1 /749321.shtml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)"204.9.184.212 - - [04/Jan/2009:17:33:50 +0800] "GET http://www.vidfreeblog.com/2006/11/01/a-life-exten ding-pill/ HTTP/1.1" 502 508 "http://www.varietygamble.com/play-www-tuttocasino -com-for-fun.html" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"218.4.192.114 - - [04/Jan/2009:17:33:49 +0800] "CONNECT 205.188.153.97:443 HTTP/1.0" 200 - "-" "-"217.197.113.41 - - [04/Jan/2009:17:33:49 +0800] "CONNECT login.icq.com:443 HTTP/1.0" 200 - "-" "-"????Apache产生的错误日志：?[Sun Jan 04 17:33:49 2009] [error] (111)Connection refused: proxy: CONNECT: attempt to connect to 205.188.153.249:443 (205.188.153.249) failed[Sun Jan 04 17:33:49 2009] [error] [client 62.195.233.232] proxy: DNS lookup failure for: sushi4.mobile.sp1.yahoo.com returned by http://sushi4.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:49 2009] [error] [client 66.152.184.2] proxy: DNS lookup failure for: www.seek-tutor.info returned by http://www.seek-tutor.info/Troop.htm, referer: http://www.varietygamble.com/casinowebsite10.html[ Sun Jan 04 17:33:50 2009] [error] [client 38.100.202.165] (104)Connection reset by peer: proxy: error reading status line from remote server aaiv.sekkal.com, referer: http://www.varietygamble.com/englishharbour-downlo ad-casinos.html[Sun Jan 04 17:33:50 2009] [error] [client 38.100.202.165] proxy: Error reading from remote server returned by http://aaiv.sekkal.com/phpBB2/viewtopic.php?p=2719 4, referer: http://www.varietygamble.com/englishharbour-downlo ad-casinos.html[Sun Jan 04 17:33:50 2009] [error] [client 204.9.184.212] proxy: DNS lookup failure for: www.vidfreeblog.com returned by http://www.vidfreeblog.com/2006/11/01/a-life-exten ding-pill/, referer: http://www.varietygamble.com/play-www-tuttocasino- com-for-fun.html[Sun Jan 04 17:33:50 2009] [error] [client 62.195.233.232] (70014)End of file found: proxy: error reading status line from remote server sushi6.mobile.ch1.yahoo.com[Sun Jan 04 17:33:50 2009] [error] [client 62.195.233.232] proxy: Error reading from remote server returned by http://sushi6.mobile.ch1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:52 2009] [error] [client 74.52.43.202] request failed: URI too long (longer than 8190)[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 219.94.180.95:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.151.120.22:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:53 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.242:443 (205.188.153.242) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 140.99.107.111:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 150.70.4.97:80 (*) failed[Sun Jan 04 17:33:54 2009] [error] [client 62.195.233.232] proxy: DNS lookup failure for: sushi7.mobile.sp1.yahoo.com returned by http://sushi7.mobile.sp1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:54 2009] [error] [client 74.52.50.178] request failed: URI too long (longer than 8190)[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 68.178.254.18:80 (*) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.98:443 (205.188.153.98) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.43.196.73:80 (*) failed[Sun Jan 04 17:33:55 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 213.186.33.18:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.72.54.22:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 72.14.253.19:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:56 2009] [error] [client 123.195.222.251] proxy: DNS lookup failure for: l09.member.tpe.yahoo.com returned by http://l09.member.tpe.yahoo.com/config/isp_verify_ user?l=pax&p=titi[Sun Jan 04 17:33:56 2009] [error] (110)Connection timed out: proxy: CONNECT: attempt to connect to 205.188.153.242:443 (205.188.153.242) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 203.190.60.131:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 211.13.204.3:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 221.231.148.193:80 (*) failed[Sun Jan 04 17:33:57 2009] [error] (111)Connection refused: proxy: CONNECT: attempt to connect to 205.188.153.249:443 (205.188.153.249) failed[Sun Jan 04 17:33:57 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 69.64.147.15:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 64.233.167.19:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 124.38.187.117:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 217.26.52.36:80 (*) failed[Sun Jan 04 17:33:58 2009] [error] [client 62.195.233.232] (70014)End of file found: proxy: error reading status line from remote server sushi5.mobile.ch1.yahoo.com[Sun Jan 04 17:33:58 2009] [error] [client 62.195.233.232] proxy: Error reading from remote server returned by http://sushi5.mobile.ch1.yahoo.com/p/login/auth?ig nore=signin[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.191.112.51:80 (*) failed[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 124.37.25.217:80 (*) failed[Sun Jan 04 17:33:59 2009] [error] [client 84.16.227.88] proxy: URI cannot be parsed: http://[sddns3.cncmax.cn:8080?host=www.asuzhou.com .cn&r=]/postreply.aspx&topicid=56&postid=103"e=yes returned by http://sddns3.cncmax.cn:8080?HOST=www.asuzhou.com. cn&R=/postreply.aspx&topicid=56&postid=103"e=yes, referer: http://www.asuzhou.com.cn/postreply.aspx?topicid=5 6&postid=103"e=yes[Sun Jan 04 17:33:59 2009] [error] [client 204.9.184.199] proxy: DNS lookup failure for: www.rebugnie.org returned by http://www.rebugnie.org/Opportunity-Seeker-Busines s-On-Ebay.html, referer: http://www.varietygamble.com/www-riverbellecasino- com-games-list.html[Sun Jan 04 17:33:59 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 81.169.169.108:80 (*) failed[Sun Jan 04 17:34:00 2009] [error] [client 83.133.126.181] proxy: DNS lookup failure for: carcover4.info returned by http://carcover4.info/Thursday.htm, referer: http://www.varietygamble.com/sportsbook-casinos.ht ml[Sun Jan 04 17:34:00 2009] [error] [client 61.45.26.158] (104)Connection reset by peer: proxy: error reading status line from remote server ranks1.apserver.net, referer: http://www.myblossom.net/tumama/index.php[Sun Jan 04 17:34:00 2009] [error] [client 61.45.26.158] proxy: Error reading from remote server returned by http://ranks1.apserver.net/share/in.php?u=mouse3&i d=tumama02, referer: http://www.myblossom.net/tumama/index.php[Sun Jan 04 17:34:00 2009] [warn] proxy: Ignoring bogus HTTP header returned by http://www.ochanomizushobo.co.jp/cgi-bin/menu.cgi? ISBN=978-4-275-00592-2 (GET)[Sun Jan 04 17:34:01 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 202.191.112.59:80 (*) failed[Sun Jan 04 17:34:01 2009] [error] (110)Connection timed out: proxy: HTTP: attempt to connect to 72.14.215.83:80 (*) failed????? 该问题已经关闭: 超过15天由系统自动关闭，悬赏平分给所有参与回答的会员 问题答案可能在这里→ 寻找更多解答 使用php充当shell脚本 用java httpclient模拟登录 获取163邮箱联系人 多线程断点续传 文件上传遇到诡异问题，lighttpd不能正确转发，返回一个http 301，
Robbin好像提到过 求脚本，python处理文件 回答 你把所有的虚拟主机都配置进来了。限定成你们domain吧。 sdh5724 (资深程序员) 2009-01-05 待解决问题数: 562 已解决问题数: 19420 已关闭问题数: 47828 问答分类 Java编程和Java企业应用 Java综合 企业应用 Struts Hibernate Spring Tomcat OO Swing JBoss 设计模式 SOA iBATIS DAO 领域模型 Web前端技术 EXT JavaScript Web综合 JQuery AJAX DWR CSS GWT UI dojo prototype JavaFX YUI 移动编程和手机应用开发 Android J2ME iPhone 移动综合 WAP Symbian BlackBerry Maemo Palm C/C++编程 C++ C D语言 Ruby编程 rails ruby Python编程 python django GAE PHP编程 PHP Flash编程和RIA Flex Flash ActionScript AIR Microsoft .Net C# .net ASP.net Windows Windows Mobile WPF SilverLight 综合技术 Database oracle 编程综合 Linux mysql 数据结构和算法 SQLServer OS DB2 Erlang Unix FP MacOSX Haskell PostgreSQL 入门讨论 入门技术 IT厂商 软件开发和项目管理 项目管理 配置管理 软件测试 敏捷开发 UML 单元测试 TDD UseCase XP CMM UP 行业应用 互联网 网络应用 电信 咨询 金融 电子政务 搜索引擎 教育 物流 制造 嵌入式 SAAS 网游 浏览器 交通 医疗 招聘求职 职场话题 求职经验 企业点评 招聘职位 面试秘籍 海阔天空 工作 生活 JavaEye IT八卦 读书 公告 IT资讯 情感 大众软件 大众硬件 申诉 游戏 活动 笑话 理财 影视 体育 旅游 音乐 答题高手 lovewhzlq CTO ( 1252 - 13930 ) yourgame CTO ( 570 - 5183 ) 蔡华江 资深架构师 ( 323 - 3392 ) xiaolongfeixiang 资深架构师 ( 301 - 2994 ) atian25 架构师 ( 253 - 2329 ) myali88 资深架构师 ( 239 - 2685 ) suziwen 资深架构师 ( 205 - 2423 ) Anddy 架构师 ( 193 - 2155 ) lizhi92574 架构师 ( 192 - 2061 ) 7454103 资深架构师 ( 189 - 2505 ) 查看全部排名>> 问题频道帮助 提问的智慧 如何获得积分及等级说明 如何关闭问题 首页 资讯 精华 论坛 问答 博客 群组 招聘 搜索 招贤纳士 广告服务 ITeye黑板报 联系我们 友情链接 ?? 2003-2011 ITeye.com. [ 京ICP证110151号 ]
836
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
