全球主机交流论坛

 找回密码
 注册

QQ登录

只需一步,快速开始

IP归属甄别会员请立即修改密码
查看: 32703|回复: 7
打印 上一主题 下一主题

DA面板 一到晚上服务器就高负载,自动重启

[复制链接]
跳转到指定楼层
1#
发表于 2014-6-17 01:25:31 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式
本帖最后由 jiajieit 于 2014-6-24 10:01 编辑

RT,草,都不知道是被攻击还是撞密码的太多...  求助!

日志的情况只发生在我的博客,其他网站都没有问题。

由于发帖字数限制,只截取了最后的几十条记录。

  1. 212.83.139.227 - - [18/Jun/2014:00:10:03 +0400] "GET /?r=https://tech-beats.com/pronostics-hippique.com HTTP/1.1" 302 352 "http://www.bexhillobserver.net/logout?referrer=http%3A//blog.jiajieit.net/%3Fr%3Dhttps%3A//tech-beats.com/pronostics-hippique.com" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  2. 198.27.87.250 - - [18/Jun/2014:00:10:03 +0400] "GET /?r=http://urls.shortys-it.com/vimaxpills970366 HTTP/1.1" 302 349 "http://cvblues.org/venueinfo.asp?venue=Bob+Hope+(Fox)+Theatre&address=&phone=209-337-HOPE&city=Stockton&vurl=blog.jiajieit.net/?r=http://urls.shortys-it.com/vimaxpills970366&vurl2=_DOMTEST_" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  3. 71.252.233.239 - - [18/Jun/2014:00:10:03 +0400] "GET /?r=http://www.chemicalrecords.com/__media__/js/netsoltrademark.php?d=thepinsmith.com HTTP/1.1" 302 387 "http://m.regus.com/mt/blog.jiajieit.net/?r=http://www.chemicalrecords.com/__media__/js/netsoltrademark.php?d=thepinsmith.com" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  4. 198.23.174.44 - - [18/Jun/2014:00:10:04 +0400] "GET /?r=http://blog.allsoftwaresales.com/CommentView%2Cguid%2Cb705c37b-b47f-4e8d-8f8b-091efc4cb684.aspx?thumb_id=7921093 HTTP/1.1" 302 414 "http://www.propertysource.com/" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1"
  5. 198.23.248.119 - - [18/Jun/2014:00:10:05 +0400] "GET /?r=http://www.seraiki.net/profile.php?u=KaAltman HTTP/1.0" 302 351 "http://www.dromoreleader.co.uk/logout?referrer=http%3A//blog.jiajieit.net/%3Fr%3Dhttp%3A//www.seraiki.net/profile.php%3Fu%3DKaAltman" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  6. 167.160.109.146 - - [18/Jun/2014:00:10:05 +0400] "GET /?r=http://rdlnk.co/MTXU3 HTTP/1.0" 302 327 "http://www.tarabaralla.info/public/gallery/main.php?g2_view=core.UserAdmin&g2_subView=core.UserLogin&g2_return=http%3A%2F%2Fblog.jiajieit.net%2F%3Fr%3Dhttp%3A%2F%2Frdlnk.co%2FMTXU3&g2_returnName=album" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  7. 181.119.20.202 - - [18/Jun/2014:00:10:06 +0400] "GET /?r=http://cs-serwers.pl/top/index.php?a=stats&u=dalenerussel HTTP/1.1" 302 348 "http://facialcosmeticsurgery.mobi/leaving.php?u=http%3A%2F%2Fblog.jiajieit.net%2F%3Fr%3Dhttp%3A%2F%2Fcs-serwers.pl%2Ftop%2Findex.php%3Fa%3Dstats%26u%3Ddalenerussel&" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  8. 212.83.139.227 - - [18/Jun/2014:00:10:07 +0400] "GET /?r=http://219.133.59.131/?a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.pronostics-hippique.com%2F%3Ehttp%3A%2F%2Fwww.pronostics-hippique.com%2F%3C%2Fa%3E HTTP/1.1" 302 368 "http://forum.microvolts.com/syn/syn.aspx?returnurl=http%3A%2F%2Fblog.jiajieit.net%2F%3Fr%3Dhttp%3A%2F%2F219.133.59.131%2F%3Fa%255B%255D%3D%253Ca+href%253Dhttp%253A%252F%252Fwww.pronostics-hippique.com%252F%253Ehttp%253A%252F%252Fwww.pronostics-hippique.com%252F%253C%252Fa%253E" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  9. 178.63.140.97 - - [18/Jun/2014:00:10:08 +0400] "GET /?r=http://appprime.net/wiki/index.php/Pengguna:JewelSchiassi HTTP/1.1" 302 363 "http://www.saferinternet.ru/out.php?site=blog.jiajieit.net/?r=http://appprime.net/wiki/index.php/Pengguna:JewelSchiassi" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  10. 198.50.161.26 - - [18/Jun/2014:00:10:09 +0400] "GET /?r=http://www.bischofberger.cc/cms/index.php?option=com_easygb&Itemid=99999999&limit=30&gsa=123600 HTTP/1.1" 302 365 "http://www.symbaloo.com/toolbar.do?url=http%3A%2F%2Fblog.jiajieit.net%2F%3Fr%3Dhttp%3A%2F%2Fwww.bischofberger.cc%2Fcms%2Findex.php%3Foption%3Dcom_easygb%26Itemid%3D99999999%26limit%3D30%26gsa%3D123600" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  11. 192.3.60.199 - - [18/Jun/2014:00:10:09 +0400] "GET /?r=http://dracula-race.com/wp-include/index.php?a=stats&u=modestacorley HTTP/1.0" 302 358 "http://bradleyalanbmdllc.com/rd/?dku=http%3A//blog.jiajieit.net/%3Fr%3Dhttp%3A//dracula-race.com/wp-include/index.php%3Fa%3Dstats%26u%3Dmodestacorley" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  12. 185.38.251.195 - - [18/Jun/2014:00:10:10 +0400] "GET /?r=http://infinite-boards.com/pods/show/url_3 HTTP/1.1" 302 348 "http://www.ci.national-city.ca.us/redirect.aspx?url=http://blog.jiajieit.net/?r=http://infinite-boards.com/pods/show/url_3" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  13. 204.44.83.7 - - [18/Jun/2014:00:10:10 +0400] "GET /?r=http://artart.cn/link.php?url=http://blog.allsoftwaresales.com/CommentView,guid,b705c37b-b47f-4e8d-8f8b-091efc4cb684.aspx?btag=a_4193b_1c_affiliateprogramgermany2&mobile=no HTTP/1.1" 302 468 "http://blog.jiajieit.net/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0"
  14. 162.244.8.14 - - [18/Jun/2014:00:10:11 +0400] "GET /?r=http://www.fybersearch.com/our-services/add-url.php?url=http://moodle.cephuelva.org/redesceps/user/view.php?id=746018&course=1&[email protected] HTTP/1.1" 302 423 "http://12dos.planetark.org/outlink.cfm?url=blog.jiajieit.net/?r=http://www.fybersearch.com/our-services/add-url.php?url=http://moodle.cephuelva.org/redesceps/user/view.php?id=746018&course=1&[email protected]" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  15. 76.108.171.79 - - [18/Jun/2014:00:10:11 +0400] "GET /?r=http://webs.galiciadigital.com/directorio/busqueda?title-web=A+Look+At+Elements+Of+social+media&field_url_pax_web_url=http%3A%2F%2Fwww.fizzlive.com%2Fmember%2F993209%2Fblog%2Fview%2F2462125&cat=All&tid=All HTTP/1.1" 302 395 "http://shimanosanpo.com/ys4/rank.cgi?mode=link&id=201&url=http://blog.jiajieit.net/?r=http://webs.galiciadigital.com/directorio/busqueda?title-web=A+Look+At+Elements+Of+social+media&field_url_pax_web_url=http%3A%2F%2Fwww.fizzlive.com%2Fmember%2F993209%2Fblog%2Fview%2F2462125&cat=All&tid=All" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  16. 109.175.8.38 - - [18/Jun/2014:00:10:12 +0400] "GET /?r=http://www.grid-gaming.com/index.php?task=profile&id=136191 HTTP/1.0" 302 355 "http://www.pvestates.org/redirect.aspx?url=http://blog.jiajieit.net/?r=http://www.grid-gaming.com/index.php?task=profile&id=136191" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  17. 148.251.111.190 - - [18/Jun/2014:00:10:12 +0400] "GET /?r=http://onpagecheck.net/?url=arcanelegendscheat.blogspot.com HTTP/1.1" 302 365 "http://www.rbcinsurance.com/propertyandcasualty/travel/onlinesaleskit/splashpages/splash-generic-full-3.html?[url]http://blog.jiajieit.net/?r=http://onpagecheck.net/?url=arcanelegendscheat.blogspot.com[/url]" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  18. 80.241.222.5 - - [18/Jun/2014:00:10:13 +0400] "GET /?r=http://www.fybersearch.com/our-services/add-url.php?url=http://diensten-vakmensen.marktplaats.nl/a/diensten-en-vakmensen/computer-en-internet-experts/8914-betaalbare-data-recovery-diensten-harde-schijf-kapot.html&[email protected] HTTP/1.1" 302 518 "http://www.donsloboda.ru/bitrix/redirect.php?event1=&event2=&event3=&goto=http://blog.jiajieit.net/?r=http://www.fybersearch.com/our-services/add-url.php?url=http://diensten-vakmensen.marktplaats.nl/a/diensten-en-vakmensen/computer-en-internet-experts/8914-betaalbare-data-recovery-diensten-harde-schijf-kapot.html&[email protected]" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  19. 198.27.65.143 - - [18/Jun/2014:00:10:13 +0400] "GET /?r=http://tmook.info/userinfo.php?uid=32657 HTTP/1.1" 302 346 "http://centennialleasingsales.com/rd/?dku=http%3A//blog.jiajieit.net/%3Fr%3Dhttp%3A//tmook.info/userinfo.php%3Fuid%3D32657" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"
  20. 80.241.222.5 - - [18/Jun/2014:00:10:13 +0400] "GET /?r=http://www.fybersearch.com/our-services/add-url.php?url=http://diensten-vakmensen.marktplaats.nl/a/diensten-en-vakmensen/computer-en-internet-experts/8914-betaalbare-data-recovery-diensten-harde-schijf-kapot.html&[email protected] HTTP/1.1" 302 518 "http://www.blackboygay.com/st/st.php?id=38675&url=http%3A//blog.jiajieit.net/%3Fr%3Dhttp%3A//www.fybersearch.com/our-services/add-url.php%3Furl%3Dhttp%3A//diensten-vakmensen.marktplaats.nl/a/diensten-en-vakmensen/computer-en-internet-experts/8914-betaalbare-data-recovery-diensten-harde-schijf-kapot.html%26email%[email][email protected][/email]" "Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16"

复制代码
2#
发表于 2014-6-17 01:43:22 | 只看该作者
没日志说个JB

点评

已上日志了,一分钟就重启一次,刚刚才去拿的日志。  发表于 2014-6-17 04:18
3#
发表于 2014-6-17 02:03:31 | 只看该作者
DA半夜会进行日志分析打包备份等工作, 负载会高很多
4#
 楼主| 发表于 2014-6-19 02:16:31 | 只看该作者
顶起,高手分析一下啊。
5#
发表于 2014-6-19 02:21:32 | 只看该作者
用的开心版吧、
6#
 楼主| 发表于 2014-6-19 02:59:09 | 只看该作者
vagaa 发表于 2014-6-19 02:21
用的开心版吧、

正版
7#
 楼主| 发表于 2014-6-24 10:00:50 | 只看该作者
这日志怎么回事啊,全都是跳转的链接。
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|手机版|小黑屋|全球主机交流论坛

GMT+8, 2025-9-23 19:31 , Processed in 0.067913 second(s), 12 queries , Gzip On, MemCache On.

Powered by Discuz! X3.4

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表