Sunucuya,Siteye saldırı nasıl tespit edilir ?

[Bartuc]

csf filan bu saldırıların karşısında hikaye.

çok işe yaramaz kalıyor ve diğer programları da engelliyor.

sunucuya bu şekilde çok yoğun saldırı gelirken bile sitelerin kapanmasını önlemek için csf filan kurmayın sunucuya. floodkoruma yükleyin. sırf bu yüzden sunucuyu riske atıp csf sildim bugün. anca öyle kesebildim saldırıyı.

[mbd5200]

Originally Posted by sinangunay

yok canım daha neler

Bu postu okuyunca aklıma şey geldi. Bu işlerden süper(!) anlayan bir eleman vardı vakti zamanında. Resellerları saldırı alıyor diye komple hosting işini bırakıp Dedicated Server satıyordu ama FULL MANAGED olarak. Kendine aldığı saldırıları engelleyemeyen 1 adam nasıl full managed sunucu satar anlamıyorum

harbiden süper(!) anlıyormuş şu an ne iş yapar acep merak ettim

[VMY]

[root@server ~]# netstat -np | grep SYN_RECV | awk '{print $5}' | cut -d. -f1-4 | cut -d: -f1 | sort -n | uniq -c | sort -n
1 77.92.151.88
1 78.161.26.201
1 78.163.108.18
1 78.167.208.28
1 78.182.68.130
1 81.214.55.31
1 84.86.73.80
1 85.100.214.69
1 85.104.49.234
1 85.179.132.30
1 86.52.5.102
1 88.234.108.216
1 88.234.196.82
1 88.237.172.112
1 88.242.139.93
1 88.247.239.254
2 78.168.62.73
2 85.103.37.206
2 85.104.128.10
2 88.235.105.123
13 67.195.37.172
23 84.56.45.200
55 88.64.19.216
129 88.245.222.117

Çokmu Sizce ?

[Onur]

O kadar fazla değil

[VMY]

1 212.175.115.101
1 212.175.115.102
1 212.175.115.11
1 212.175.115.196
1 212.175.115.215
1 212.175.115.219
1 212.175.115.226
1 212.175.115.80
1 212.175.115.82
1 212.175.115.84
1 212.175.115.90
1 212.175.115.93
1 212.175.115.94
1 212.175.115.97
1 212.176.107.238
1 220.181.32.22
1 65.36.241.79
1 65.54.246.154
1 66.249.65.133
1 72.14.199.38
1 74.6.22.177
1 74.6.8.120
1 78.160.34.226
1 78.162.94.219
1 78.168.20.212
1 78.169.224.48
1 78.173.184.235
1 78.173.244.238
1 78.175.157.253
1 78.186.71.189
1 81.213.209.45
1 81.213.59.98
1 85.101.93.202
1 85.104.9.234
1 85.107.78.12
1 85.110.20.82
1 88.224.209.164
1 88.225.210.103
1 88.229.114.101
1 88.232.218.111
1 88.236.21.89
1 88.240.114.208
1 88.240.30.154
1 88.241.167.82
1 88.245.10.133
1 88.245.122.143
1 88.246.115.254
1 88.246.172.66
1 88.247.239.47
1 88.248.137.191
1 88.250.16.166
1 88.251.240.191
1 88.252.17.181
1 Address
1 servers)
2 139.179.106.40
2 195.174.36.61
2 212.175.115.100
2 212.175.115.78
2 212.175.115.83
2 212.175.115.87
2 212.175.115.89
2 212.175.115.96
2 216.27.93.119
2 217.169.46.98
2 64.1.215.166
2 78.161.89.160
2 78.163.105.35
2 78.167.162.246
2 78.169.198.48
2 78.173.187.178
2 78.176.30.170
2 78.20.109.133
2 81.214.209.228
2 85.104.130.251
2 85.107.94.75
2 85.107.99.128
2 85.110.183.167
2 85.97.118.157
2 85.99.249.100
2 88.224.1.112
2 88.227.141.105
2 88.228.135.229
2 88.228.252.118
2 88.230.51.159
2 88.230.94.97
2 88.239.76.33
2 88.242.188.162
2 88.245.198.135
2 88.245.32.161
2 88.246.169.208
2 88.246.68.15
2 88.251.173.79
2 88.252.39.151
2 88.254.252.233
3 212.175.112.173
3 38.100.41.102
3 78.166.92.163
3 78.180.31.68
3 85.110.196.187
3 88.229.54.154
3 88.233.134.187
4 212.175.115.6
4 212.175.115.71
4 76.163.162.42
4 78.164.245.77
4 78.169.44.51
4 78.178.157.40
4 81.213.215.168
4 81.215.226.220
4 85.107.98.163
4 85.110.213.213
4 88.225.210.170
4 88.225.241.105
4 88.252.97.104
5 212.175.115.77
5 212.175.115.85
5 88.247.216.134
5 88.252.164.244
6 78.160.50.103
6 78.164.0.47
6 78.165.108.79
6 78.165.126.173
6 78.168.34.195
6 78.173.171.96
6 78.175.130.149
6 78.179.138.137
6 78.180.14.47
6 85.99.130.249
6 88.227.57.11
6 88.229.225.197
6 88.230.42.48
6 88.238.10.74
6 88.242.159.198
6 88.243.248.97
6 88.249.93.157
6 88.252.206.35
7 212.175.112.151
7 212.175.112.159
7 212.175.115.72
7 77.92.88.23
7 78.161.40.61
7 78.162.74.92
7 78.163.159.63
7 78.165.101.251
7 78.165.163.103
7 78.169.229.89
7 78.179.8.116
7 78.180.223.169
7 81.215.205.34
7 85.102.92.229
7 88.227.216.233
7 88.227.48.137
7 88.228.112.222
7 88.229.11.113
7 88.232.33.251
7 88.233.196.104
7 88.244.143.17
7 88.248.10.217
7 88.249.195.252
7 88.251.13.155
7 88.252.217.27
8 193.254.228.201
8 78.171.12.62
8 78.180.102.88
8 85.101.113.49
8 88.231.197.0
8 88.235.127.39
8 88.238.9.110
8 88.244.59.153
8 88.245.201.241
8 88.245.99.23
8 88.247.206.162
8 88.252.183.165
9 78.169.195.132
9 78.171.36.242
9 85.107.145.246
9 85.99.201.55
9 88.229.230.206
9 88.231.19.103
9 88.234.211.26
9 88.238.79.202
9 88.252.131.103
10 212.175.112.165
10 78.177.169.182
10 88.240.127.9
10 88.250.72.97
12 85.101.153.132
12 85.108.105.240
13 78.183.202.253
13 78.188.36.4
13 85.105.35.28
13 88.245.99.90
14 85.107.1.100
14 88.232.242.113
16 85.107.199.189
16 85.110.9.169
16 85.110.93.252
16 88.228.150.229
16 88.240.70.1
19 88.225.216.116
20 85.100.125.174
21 85.99.146.186
24 85.110.192.122
27 88.245.68.17
30 88.253.116.19
32 78.166.0.207
32 78.187.12.73
32 81.79.250.111
33 78.162.29.36
36 88.245.120.148
40 88.254.135.187
42 88.253.89.251
42 88.254.53.210
44 85.96.188.35
49 85.101.24.79
49 88.231.92.194
49 88.242.188.100
49 88.243.62.188
54 127.0.0.1
58 78.174.55.241
59 88.226.169.115
61 88.243.38.235

Load Averages: 74.64 178.29 138.95

Bune ya

[By AzraiL]

bende hiç yok gibim :p
[root@linux ~]# netstat -np | grep SYN_RECV | awk '{print $5}' | cut -d. -f1-4 | cut -d: -f1 | sort -n | uniq -c | sort -n
1 203.157.147.14
1 78.166.140.233
1 81.199.63.34
1 85.103.96.246
1 87.176.97.216
1 88.240.102.250
2 78.172.181.207
2 85.102.154.41
2 85.97.115.135
3 85.104.65.192