网站被攻击了，也就是流量攻击了如何处理？|云服务器 ECS - 开发者论坛

周聪

<div class="f14 mb10" id="read_tpc">
做<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=网站',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_3">网站</span>要低调，闷声发财，不要去和某某某吵架，当然就算是我们正常经营，难免遇到竞争对手之类的，恶意的攻击无法避免。如何保护网站在攻击中能正常访问，比较困难，道高一次魔高一丈。流量攻击，实际上目前并没有很好的方法防御，高防<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=服务器',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_2"><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=服务',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_5">服务</span>器</span>由于太贵，一般难以承受。我们只能从某些方面缓解攻击情况。如何查看网站被攻击了？<span style="display:none"> &h7
n>q </span>&nbsp;<br /><ol type="1" style="margin:0 0 0 25px"><li>方法一：直接登录<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=阿里云',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_1"><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=阿里',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_4">阿里</span>云</span>控制台，进入https://yundun.console.aliyun.com/&nbsp;&nbsp;进入ddos防护。实际上在云盾里面也可以看到被攻击情况。</li><li>方法二：你网站卡死了，甚至挂了，linux执行一下命令。</li></ol><span style="display:none"> Es\J%*\u </span>&nbsp;<br /><div class="f12">复制代码</div><div class="blockquote2" id="code1"><ol><li>netstat -ntu | awk &#39;{print $5}&#39; | cut -d: -f1 | sort | uniq -c | sort -n</li></ol></div>会出现ip和连接数，如果大量的ip然后其连接数在50以上（内部ip的连接数除外哦，<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=数据库',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_8"><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=数据',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_9">数据</span>库</span>、redis等服务器ip一般连接数都比较大，但是属于正常现象。）<span style="display:none"> #~qzaETv, </span>&nbsp;<br /><span id="att_104739" class="f12"><span id="td_att104739" onmouSEOver="read.open('menu_att104739','td_att104739');" style="display:inline-block;"><img src="http://bbs.aliyun.com/attachment/Fid_207/207_34001808_370f8913db025e5.jpg?45" border="0" style="max-width:995px;" onload="if(this.offsetWidth>'995')this.width='995';"></span><div id="menu_att104739" class="pw_menu" style="display:none;"><div style="border:1px solid #ffffff;background:#f3f9fb;padding:5px 10px;"><p><span class="mr10">图片:deny.jpg</span></p></div></div></span><span style="display:none"> Zz'g&ewo </span>&nbsp;<br /> <span style="display:none"> yB{1&S5C </span>&nbsp;<br /> <span style="display:none"> v5?ct?q </span>&nbsp;<br /> <span style="display:none"> _t4(H))]vG </span>&nbsp;<br /><b>下面对于这些恶意用户怎么处理<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=呢',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_7">呢</span>？？？？分享一个脚本，<span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=自',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_6">自</span>动屏蔽恶意用户。</b><span style="display:none"> pQ4HX)&lt </span>&nbsp;<br /><b><span id="att_104740" class="f12"><b></b><img src="https://bbs.aliyun.com/read/images/wind85/file/zip.gif" align="absbottom" /> deny_blackip.zip (2 K) &#19979;&#36733;&#27425;&#25968;:265 </span><span style="display:none"> WZTv </span>&nbsp;<br /></b><span style="display:none"> YzEOfHL, </span>&nbsp;<br /><b><span style="display:none"> 4&:|h        1 </span>&nbsp;<br /></b><span style="display:none"> ^![7X'!;pt </span>&nbsp;<br /><b>说明一下：</b><span style="display:none"> zh(=kS` </span>&nbsp;<br /><span onclick="sendmsg('pw_ajax.php','action=relatetag&tagname=建议',this.id)" style="cursor:pointer;border-bottom: 1px solid #FA891B;" id="rlt_10">建议</span>此脚本仅在网站被攻击的时候允许，因为很容易屏蔽搜索引擎蜘蛛等正常的用户。<span style="display:none"> {aK
3'-7 </span>&nbsp;<br />另外，建议一段时间重启一下iptables，这样被屏蔽的ip会自动释放，不然会误伤一些正常的用户。<span style="display:none"> ]zI
Ii% </span>&nbsp;<br /><b><span style="display:none">  >Af0S;S </span>&nbsp;<br /></b><span style="display:none"> pDhUD}1G </span>&nbsp;<br />注明：<span style="display:none"> V&ltH5'^$j </span>&nbsp;<br />脚本转载地址：http://zhangge.net/4649.html<span style="display:none"> &Rz-;66bN </span>&nbsp;<br /> <span style="display:none"> yKm6
8n^
</span>&nbsp;<br /> <span style="display:none"> Aq>?G+ </span>&nbsp;<br /> <span style="display:none"> [?$tu%Q(Z </span>&nbsp;<br /> <span style="display:none"> K]dR%j </span>&nbsp;<br /> <span style="display:none"> 6J$I8b#/ </span>&nbsp;<br /><div id="alert_tpc" style="color:gray;margin-top:30px">[ 此帖被玩站网在2016-07-12 18:37重新编辑 ]</div>
</div>
</div>
<!--content_read-->
</td>
</tr>
<tr>