With the rapid development of the Internet, there are more and more websites, and server security has become a topic of great concern. Therefore, server selection should be very careful. Many people feel that server attacks are far away from them, and server attacks are carried out all the time on the Internet. If the website has not been attacked, it means that there is little traffic on the website, and server security is very important when the website traffic is large. Common servers include DDOS traffic attacks and CC attacks.
So what should we do in the face of server intrusion? First of all, when selecting a server, it is recommended to select a high defense server, because it can defend against attacks; Let's introduce how the server is attacked:
How does the server defend against DDOS and CC attacks?
The database has been invaded, and there are many websites with valuable content, which has attracted some peers to want to get the data inside. Intrusion is carried out by means of blasting, trojan horse, searching for server vulnerabilities, etc. What should we do if we encounter these situations. We must do a good job in basic things, such as timely update of anti-virus software, regular backup of database, and regular modification of administrator password. Don't feel troublesome. In many cases, our laziness leads to disaster.
What if they are attacked by CC or DDOS?
Let's make different strategies based on these two attacks. First of all, they were attacked by CC. CC attacks mainly focused on hitting the server port and constantly accessing it, causing CPU to run full, leading to downtime.
Then according to the principle of CC attack:
- First, we change the port and block the attacked port, so that the attack can be blocked temporarily.
- IIS blocks the IP address. If we find the source IP address of CC attacks through commands or by viewing logs, we can set the IP address in IIS to block its access to Web sites, so as to prevent IIS attacks.
- Make security protection policies for the server. Check the attacked applications, etc.
If it is attacked by DDOS:
- Ensure that the system files of the server are the latest version, and update the system patches in a timely manner.
- Turn off unnecessary services.
- Limits the number of SYN half connections that are opened at the same time.
- Reduce the time out time of the SYN half connection.
- Properly set the firewall to prohibit access to non open services of the host and restrict access to specific IP addresses.
