UC知道服务器被攻击的信息请高手帮我分析
来源：百度知道 编辑：UC知道 时间：2024/05/25 04:58:24
这是服务器被攻击的信息请高手帮我分析一下，是用哪种软件攻击的如何修补，感谢！[7] Tue 31Jul07 12:13:07 - Sock ID=599 shutdown(616,0) --> 0 (OK)
[7] Tue 31Jul07 12:13:07 - Sock ID=599 shutdown(616,1) --> 0 (OK)
[7] Tue 31Jul07 12:13:07 - Sock ID=599 closesocket(616) --> 0 (OK)
219.129.83.12
[7] Tue 31Jul07 12:27:30 - Sock ID=645 WSAAsyncSelect[7] Tue 31Jul07 12:33:53 - Sock ID=672 shutdown(508,0) --> 0 (OK)
[7] Tue 31Jul07 12:33:53 - Sock ID=672 shutdown(508,1) --> 0 (OK)
[7] Tue 31Jul07 12:33:53 - Sock ID=672 closesocket(508) --> 0 (OK)
[7] Tue 31Jul07 12:13:07 - Sock ID=599 shutdown(616,1) --> 0 (OK)
[7] Tue 31Jul07 12:13:07 - Sock ID=599 closesocket(616) --> 0 (OK)
219.129.83.12
[7] Tue 31Jul07 12:27:30 - Sock ID=645 WSAAsyncSelect[7] Tue 31Jul07 12:33:53 - Sock ID=672 shutdown(508,0) --> 0 (OK)
[7] Tue 31Jul07 12:33:53 - Sock ID=672 shutdown(508,1) --> 0 (OK)
[7] Tue 31Jul07 12:33:53 - Sock ID=672 closesocket(508) --> 0 (OK)
立刻断网,看看查点东西出来,网马什么的,扫扫自己开放些什么端口,再分析可能的入侵路子,系统存在哪些漏洞,看看是对路由器的攻击还是对服务器的攻击!,下次记住把防火墙打开~