초당 2.7기가 패킷이 들어 오는데요 ㅡㅡ;;

안녕하십니까? CDNetworks 홍석범이라고 합니다.

일단 2.7Gbps가 유입된다면 ddos성 비정상 트래픽임은 분명한 것 같습니다.
그런데 일반적으로 이 정도의 트래픽이 tcp로 들어오지는 않을 것 같습니다.
혹 udp나 icmp로 flooding 이 들어오는 것은 아닌지 확인을 해 보시기 바랍니다.

아울러, 아래의 tcp 세션에 대한 내용은 로그 파일을 살펴보아 실제 정상적인 접속이 많은 것인지 여부를 체크해 보셔야 합니다. 
그렇지 않다면 ngrep등 패킷캡처 프로그램을 이용하여 패킷을 분석해야 정상 트래픽만 허용하고 공격 트래픽만 차단할 수 있을 것입니다.  좀 더 많은 정보가 있어야 도움을 드릴 수 있을텐데.. 별로 도움을 드리지 못해 죄송합니다.

감사합니다.

신원호 님의 글

현제는 모든 ip을 차단 해놓은 상태인데.. 서비스 불가예요

서비스을 오픈 할 방법이 없을까요?

서버는 윈도우 2003서버 8080포트만 사용하고요..

일부분 로그 입니다 ㅡㅡ;;;

2009/06/27-00:00:00  TCP   PACKET    unknown  58.231.214.15, 2915                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  117.53.203.183, 38439                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  115.138.90.5, 59050                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  121.152.13.90, 3917                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  124.63.185.25, 33415                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  115.86.109.60, 4851                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  59.31.165.41, 1828                            ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  211.239.251.65, 2239                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  221.166.231.131, 1909                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  58.125.0.121, 2145                            ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  118.42.108.167, 2045                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  118.216.42.175, 2794                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  122.254.192.91, 3527                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  211.226.148.155, 1443                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  211.178.192.179, 4566                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  119.148.137.207, 64119                        ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  125.190.111.88, 4702                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  114.201.159.91, 4311                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  125.182.160.6, 9837                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  119.197.78.35, 3787                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  58.121.198.93, 48809                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  122.202.163.220, 4590                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  112.72.206.97, 4217                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  112.72.241.114, 4472                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  203.170.104.215, 2360                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  58.125.26.180, 4732                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  59.25.146.34, 60491                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  125.176.232.154, 2074                         ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  64.59.144.24, 22350                           ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  121.167.18.169, 8935                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  118.222.235.45, 1100                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  222.226.14.156, 4520                          ***.***.***.***, 8080
2009/06/27-00:00:00  TCP   PACKET    unknown  58.231.215.161, 64739                         ***.***.***.***, 8080

2009/06/27-00:00:00  TCP   PACKET    unknown  125.176.142.202, 3803                         ***.***.***.***, 8080

여기 까지는 방화벽

여기 밑에는 서버에서 netstat -na

58.76.163.33:1119      ESTABLISHED
58.76.180.44:1112      ESTABLISHED
58.77.82.124:10150     ESTABLISHED
58.77.200.124:34763    ESTABLISHED
58.77.249.42:1089      ESTABLISHED
58.78.148.125:1066     ESTABLISHED
58.120.40.40:1181      ESTABLISHED
58.121.36.138:62701    ESTABLISHED
58.122.89.194:1113     ESTABLISHED
58.123.155.153:1070    ESTABLISHED
58.124.62.146:1142     ESTABLISHED
58.124.130.25:32080    ESTABLISHED
58.125.18.142:3094     ESTABLISHED
58.125.26.180:1067     ESTABLISHED
58.125.198.254:1145    ESTABLISHED
58.126.109.119:4534    ESTABLISHED
58.127.35.112:49255    ESTABLISHED
58.127.62.139:1077     ESTABLISHED
58.127.104.34:1131     ESTABLISHED
58.140.3.238:49231     ESTABLISHED
58.140.33.230:10194    ESTABLISHED
58.140.41.81:1078      ESTABLISHED
58.140.66.245:1099     ESTABLISHED
58.140.125.189:1083    ESTABLISHED
58.140.132.83:1057     ESTABLISHED
58.140.137.184:3572    ESTABLISHED
58.140.142.70:1138     ESTABLISHED
58.140.153.25:1058     ESTABLISHED
58.140.228.14:1098     ESTABLISHED
58.141.62.25:1056      ESTABLISHED
58.141.224.211:1118    ESTABLISHED
58.142.31.194:1182     ESTABLISHED
58.142.45.155:1088     ESTABLISHED
58.142.141.182:1094    ESTABLISHED
58.143.37.32:1095      ESTABLISHED
58.145.79.105:1185     ESTABLISHED
58.148.11.40:49306     ESTABLISHED
58.148.92.232:1091     ESTABLISHED
58.224.75.105:1097     ESTABLISHED
58.224.130.73:1086     ESTABLISHED
58.225.237.62:1083     ESTABLISHED
58.226.47.189:1892     ESTABLISHED
58.226.107.219:1079    ESTABLISHED
58.226.178.6:1074      ESTABLISHED
58.226.182.79:1171     ESTABLISHED
58.227.179.145:1089    ESTABLISHED
58.228.244.231:1113    ESTABLISHED
58.229.148.229:1077    ESTABLISHED
58.230.43.142:1080     ESTABLISHED
58.230.106.120:1356    ESTABLISHED
58.231.214.15:1070     ESTABLISHED
58.232.21.140:1103     ESTABLISHED
58.233.123.208:1124    ESTABLISHED
58.233.223.227:1085    ESTABLISHED
58.234.95.206:1144     ESTABLISHED
58.234.99.80:1250      ESTABLISHED
58.234.99.80:3768      ESTABLISHED
58.234.238.221:1074    ESTABLISHED
58.235.5.229:1146      ESTABLISHED
58.235.28.20:1072      ESTABLISHED
58.235.62.67:1106      ESTABLISHED
58.235.116.184:1098    ESTABLISHED
58.235.141.14:1104     ESTABLISHED
58.236.60.244:1219     ESTABLISHED
58.236.74.16:1191      ESTABLISHED
58.236.101.2:3471      ESTABLISHED
58.238.24.70:1112      ESTABLISHED
58.239.37.182:1052     ESTABLISHED
58.239.37.250:20219    ESTABLISHED
58.239.50.175:1105     ESTABLISHED
58.239.167.194:1102    ESTABLISHED
58.239.168.128:1282    ESTABLISHED
58.239.185.224:1091    ESTABLISHED
58.239.200.119:1075    ESTABLISHED
59.0.132.129:1101      ESTABLISHED
59.0.164.170:1099      ESTABLISHED
59.1.203.102:1069      ESTABLISHED
59.2.65.245:1096       ESTABLISHED
59.2.146.108:15967     ESTABLISHED
59.3.84.105:1142       ESTABLISHED
59.7.11.163:1064       ESTABLISHED
59.8.89.225:1097       ESTABLISHED
59.11.52.167:1067      ESTABLISHED
59.12.60.166:1059      ESTABLISHED
59.12.128.56:1124      ESTABLISHED
59.13.255.220:1070     ESTABLISHED
59.14.64.181:1068      ESTABLISHED
59.15.82.103:1102      ESTABLISHED
59.15.148.150:60117    ESTABLISHED
59.15.182.215:1098     ESTABLISHED
59.17.248.5:29515      ESTABLISHED
59.18.218.43:49218     ESTABLISHED
59.22.69.223:62807     ESTABLISHED
59.22.89.94:1055       ESTABLISHED
59.23.142.25:1111      ESTABLISHED
59.24.144.92:35767     ESTABLISHED
59.24.246.228:1086     ESTABLISHED
59.25.146.34:34761     ESTABLISHED
59.25.218.223:1062     ESTABLISHED
59.31.1.230:1193       ESTABLISHED
59.31.95.191:1093      ESTABLISHED
59.31.226.195:1116     ESTABLISHED
59.86.210.46:1114      ESTABLISHED
59.86.217.106:1101     ESTABLISHED
59.86.245.83:1109      ESTABLISHED
59.86.251.60:1077      ESTABLISHED
59.151.198.71:1091     ESTABLISHED
59.152.151.211:1090    ESTABLISHED
59.152.153.243:1069    ESTABLISHED
59.187.80.110:1073     ESTABLISHED
60.196.25.170:1065     ESTABLISHED
60.212.234.36:58245    ESTABLISHED
60.212.238.34:1087     ESTABLISHED
61.4.224.60:1115       ESTABLISHED
61.4.225.175:1133      ESTABLISHED
61.5.174.32:1080       ESTABLISHED
61.37.106.155:1083     ESTABLISHED
61.38.76.34:1084       ESTABLISHED
61.40.56.67:1083       ESTABLISHED
61.74.13.176:1081      ESTABLISHED
61.74.20.215:1099      ESTABLISHED
61.74.42.144:33043     ESTABLISHED
61.74.254.152:49229    ESTABLISHED
61.76.223.219:1126     ESTABLISHED
61.77.32.175:1056      ESTABLISHED
61.77.197.132:1817     ESTABLISHED
61.77.241.141:1082     ESTABLISHED
61.83.4.239:1085       ESTABLISHED
61.83.40.18:1106       ESTABLISHED
61.97.236.198:1115     ESTABLISHED
61.98.6.241:1089       ESTABLISHED
61.98.211.116:14283    ESTABLISHED
61.100.196.123:1069    ESTABLISHED
61.100.201.97:1074     ESTABLISHED
61.100.201.185:1101    ESTABLISHED
61.101.17.45:1068      ESTABLISHED
61.102.9.238:1174      ESTABLISHED
61.102.84.185:1065     ESTABLISHED
61.105.10.21:1129      ESTABLISHED
61.106.96.149:1152     ESTABLISHED
61.109.42.116:1123     ESTABLISHED
61.109.162.201:1301    ESTABLISHED
61.141.202.140:59775   ESTABLISHED
61.247.115.75:49207    ESTABLISHED
61.251.200.151:1146    ESTABLISHED
61.251.200.185:1087    ESTABLISHED
61.255.244.173:25702   ESTABLISHED
69.109.47.243:49192    ESTABLISHED
70.52.178.163:1076     ESTABLISHED
71.191.71.84:1067      ESTABLISHED
72.82.167.46:50611     ESTABLISHED
72.192.252.229:1128    ESTABLISHED
76.19.97.40:32112      ESTABLISHED
76.94.184.30:1077      ESTABLISHED
76.104.248.52:1066     ESTABLISHED
87.201.254.102:43679   ESTABLISHED
99.199.31.147:60351    ESTABLISHED
110.9.168.42:1052      ESTABLISHED
110.9.169.8:1058       ESTABLISHED
110.9.222.168:1070     ESTABLISHED
110.9.227.83:60924     ESTABLISHED
110.9.243.246:32996    ESTABLISHED
110.10.15.52:12899     ESTABLISHED
110.10.20.182:1085     ESTABLISHED
110.10.124.6:1062      ESTABLISHED
110.10.199.103:1083    ESTABLISHED
110.10.202.157:1071    ESTABLISHED
110.12.131.68:1087     ESTABLISHED
110.12.230.202:1092    ESTABLISHED
110.12.249.70:1090     ESTABLISHED
110.13.22.15:1143      ESTABLISHED
110.13.193.65:1095     ESTABLISHED
110.14.238.194:1079    ESTABLISHED
110.35.162.246:1070    ESTABLISHED
110.46.151.143:1086    ESTABLISHED
110.46.217.151:1092    ESTABLISHED
110.47.41.109:1053     ESTABLISHED
110.47.79.173:1131     ESTABLISHED
111.171.39.12:1066     ESTABLISHED
111.171.78.22:1086     ESTABLISHED
112.72.167.196:1061    ESTABLISHED
112.72.188.215:49202   ESTABLISHED
112.140.65.73:1150     ESTABLISHED
112.144.21.158:1048    ESTABLISHED
112.144.58.198:1059    ESTABLISHED
112.144.75.246:33176   ESTABLISHED
112.144.136.112:1088   ESTABLISHED
112.145.3.140:1067     ESTABLISHED
112.145.27.8:1070      ESTABLISHED
112.146.18.238:1103    ESTABLISHED
112.146.31.52:1065     ESTABLISHED
112.146.35.35:1044     ESTABLISHED
112.146.54.176:1103    ESTABLISHED
112.148.70.35:1078     ESTABLISHED
112.150.103.229:1063   ESTABLISHED
112.153.94.59:1071     ESTABLISHED
112.168.52.230:1080    ESTABLISHED
112.168.52.230:1087    ESTABLISHED
113.10.32.201:1054     ESTABLISHED
113.10.61.63:1089      ESTABLISHED
113.30.14.151:1046     ESTABLISHED
113.30.20.169:1132     ESTABLISHED
113.130.136.240:34764  ESTABLISHED
113.130.229.11:1157    ESTABLISHED
113.131.181.149:1169   ESTABLISHED
113.131.216.127:1060   ESTABLISHED
113.131.219.32:1115    ESTABLISHED
113.199.20.66:1087     ESTABLISHED
114.29.33.231:1105     ESTABLISHED
114.129.117.193:49213  ESTABLISHED
114.150.14.128:1075    ESTABLISHED
114.199.250.121:1098   ESTABLISHED
114.199.253.230:1096   ESTABLISHED
114.200.93.139:1076    ESTABLISHED
114.200.111.251:59501  ESTABLISHED
114.200.168.130:1123   ESTABLISHED
114.200.209.243:1108   ESTABLISHED
114.200.225.186:1132   ESTABLISHED
114.201.60.149:1085    ESTABLISHED
114.201.123.126:1051   ESTABLISHED
114.201.192.2:1085     ESTABLISHED