MJ12bot virus ve saldiri botu

[Gurbetseli]

MJ12bot/v1.0.8 kendisi hem virüs hemde saldiri botudur.
MJ12bot virusünü pc nizde Kaspersky ile yarama yaparak Trojan.Win32.Agent.dqy ve Trojan.Win32.Zapchast.dv isimlerinde bulabilirsiniz.Ve kaspersky ile virüsü bilgisayarinizdan silebilirsiniz.
Gelelim saldiri yönüne, yani biz webmasterlari ilgilendiren tarafina:
MJ12bot Majestic-12 bot isimleri ile web sitenize girmekte ve .htaccess dosyasini kitleyerek siteniz acilmamaktadir.
cözümü :
Sitenizin robost.txt ye eklerseniz sorununuz kalmaz.
User-agent: MJ12bot
Disallow: /
robost.txt hakkinda detayli bilgiye buradan ulasabilirsiniz.
.htaccess olarak cözümü :
%{HTTP_USER_AGENT} MJ12bot/v1\.0\.8 [NC]
RewriteRule ^.* - [F]
üstteki ve alttaki iki alternatif cözümü var.
RewriteCond %{HTTP_USER_AGENT} ^MJ12bot/v1\.0\.8.*$
RewriteRule .* - [F]

Son cözüm alttaki ipleri banlamak:
81.37.82.92, 88.122.65.77, 82.63.207.5, 91.165.157.212, 70.178.6.68, 200.72.237.62, 90.9.9.108, 82.231.152.113, 77.180.217.25, 74.125.16.1, 88.16.102.193, 87.111.85.192, 79.16.236.166, 87.217.108.16, 82.44.32.35, 81.184.9.107, 82.61.184.189, 68.91.194.183, 89.6.233.45, 88.25.87.196, 78.50.128.207, 219.142.226.145, 82.223.15.92, 80.35.202.236, 84.228.175.218, 87.160.93.171, 86.76.146.110, 172.174.227.13, 89.6.189.183, 190.11.229.73, 217.200.200.56, 74.14.108.205, 85.133.134.173, 85.81.77.80, 86.108.45.238, 90.40.45.171, 80.30.87.19, 151.20.174.145, 151.21.31.245, 151.33.153.238, 151.56.183.163, 151.59.89.86, 151.60.35.217, 163.21.179.1, 168.126.57.169, 189.14.52.25, 189.174.199.121, 190.129.119.140, 190.154.14.219, 190.2.1.41, 190.2.33.121, 190.44.68.192, 190.45.239.7, 190.49.33.56, 194.63.133.37, 195.25.234.136, 195.3.232.177, 196.206.6.133, 196.218.209.34, 196.40.62.172, 200.125.67.16, 200.171.2.60, 200.93.63.137, 200.94.235.104, 201.11.218.26, 201.253.218.237, 201.3.10.170, 201.52.89.227, 201.81.224.153, 206.162.206.171, 212.16.102.56, 212.76.37.138, 212.91.126.194, 213.22.56.31, 213.37.90.220, 213.44.41.128, 217.224.121.117, 217.234.132.250, 220.225.66.162, 24.232.190.34, 41.225.129.87, 62.10.166.54, 62.10.221.71, 62.10.245.17, 62.121.101.246, 62.237.224.118, 62.28.6.19, 62.51.31.78, 69.139.95.84, 71.179.155.203, 77.176.121.242, 78.62.96.230, 79.10.200.71, 79.19.194.228, 79.211.78.157, 79.213.104.9, 79.3.5.138, 79.5.200.86, 79.6.13.154, 79.7.169.36, 80.103.160.182, 80.24.231.173, 80.26.137.201, 80.30.107.138, 80.35.159.212, 81.172.105.222, 81.198.90.90, 81.35.166.218, 81.36.227.143, 81.37.19.33, 81.38.207.73, 81.50.159.211, 82.121.169.73, 82.121.181.171, 82.159.21.166, 82.213.151.55, 82.229.108.69, 82.244.228.224, 82.248.68.104, 82.249.122.209, 82.55.143.237, 83.11.178.49, 83.112.195.165, 83.115.157.45, 83.184.66.179, 83.19.21.202, 83.196.4.16, 83.202.168.54, 83.24.208.180, 83.24.33.67, 83.33.20.53, 83.37.65.37, 83.45.72.220, 83.49.101.30, 83.52.184.251, 83.60.194.171, 84.110.183.10, 84.125.71.4, 84.139.73.46, 84.154.220.108, 84.167.162.252, 84.183.111.217, 84.189.126.209, 84.221.167.207, 84.57.177.229, 84.78.202.2, 84.79.161.173, 84.80.170.43, 84.97.216.246, 85.104.193.145, 85.104.76.112, 85.108.38.171, 85.147.41.2, 85.221.152.203, 85.241.161.219, 85.55.136.109, 85.59.112.171, 85.73.77.49, 86.42.32.12, 87.10.248.5, 87.103.88.3, 87.105.184.56, 87.11.152.203, 87.165.202.176, 87.196.159.200, 87.217.81.243, 87.219.228.36, 87.7.247.166, 87.7.51.164, 87.88.8.20, 87.89.235.24, 87.89.36.131, 88.0.120.245, 88.0.209.252, 88.13.48.129, 88.14.179.151, 88.160.48.74, 88.160.53.22, 88.170.210.215, 88.26.180.252, 88.3.227.84, 89.1.145.29, 89.142.151.176, 89.178.106.33, 89.61.92.246, 90.29.56.222, 90.31.189.190, 90.33.66.64, 90.34.64.134, 90.37.18.87, 90.38.225.7, 90.48.185.242, 90.9.126.226, 91.16.119.70, 91.165.49.245, 91.5.78.108, 92.113.220.25, 121.247.17.61, 217.234.92.70, 151.65.156.210, 201.58.216.91, 212.49.153.97, 86.61.50.244, 88.169.42.1, 77.49.44.159, 213.98.99.124, 82.131.84.110, 89.180.64.112, 217.136.43.182, 85.45.240.177, 89.40.238.166, 90.18.0.194, 190.13.16.235, 216.17.109.121, 190.20.126.172, 200.93.8.248, 74.13.96.34, 79.179.122.222, 79.183.130.71, 80.58.205.55, 81.172.62.140, 83.55.141.211, 85.49.35.15, 85.84.213.86, 85.85.187.84, 82.224.107.155, 62.147.240.7, 172.142.90.144, 151.56.155.74, 86.220.124.147, 89.138.131.210, 89.139.0.136, 79.27.70.117, 89.129.81.184, 86.208.230.194, 80.134.153.231, 82.135.208.21, 87.20.232.74, 193.77.16.231, 58.186.72.112, 72.70.122.125, 83.138.135.50, 83.34.196.242, 87.217.250.149, 87.30.238.169, 88.19.66.250, 89.245.130.166, 89.61.200.128, 89.77.3.36, 99.234.43.247, 82.217.63.27, 61.229.51.140, 89.129.72.80, 90.32.171.221, 89.182.10.173, 82.236.219.104, 88.8.109.30, 88.25.226.148, 174.216.89.68, 87.176.253.75, 87.179.57.206, 85.125.126.58, 88.165.38.150, 82.56.177.152, 84.221.252.170, 83.113.254.151, 217.159.192.57, 71.63.197.49, 189.13.172.97, 84.91.64.232, 201.11.229.86, 220.130.50.195, 85.49.140.58, 88.65.172.127, 189.18.174.93, 216.189.186.10, 82.231.19.23, 189.26.169.192, 190.64.193.250, 200.117.80.123, 212.21.248.92, 75.36.166.91, 77.181.55.11, 79.18.93.163, 79.27.242.171, 80.181.125.64, 81.34.255.221 81.37.145.81, 82.245.44.195, 82.58.109.197, 82.65.36.99, 83.39.89.236, 83.4.0.205, 83.44.33.211, 84.122.240.73, 84.176.108.84, 84.223.185.110, 85.57.205.49, 87.218.61.38, 87.29.228.20, 87.6.202.58, 88.11.236.65, 88.3.232.124, 88.8.81.203, 89.205.11.213, 90.17.113.102, 90.7.143.52, 91.50.255.29, 79.27.4.235, 84.102.210.12, 79.9.206.231, 90.162.16.130, 151.71.191.220, 85.60.39.74, 82.237.69.84, 80.58.205.42, 212.35.95.172, 88.104.228.166, 83.101.4.180, 81.246.105.105, 77.179.75.7, 201.2.235.42, 67.68.148.55, 77.125.7.153, 124.254.174.215, 125.176.37.150, 151.33.212.15, 189.15.100.102, 189.166.229.138, 189.176.84.208, 189.194.130.254, 190.139.84.102, 190.6.195.31, 190.86.1.238, 193.152.161.66, 193.77.184.204, 193.92.131.110, 195.238.170.179, 196.217.83.138, 200.103.139.158, 200.171.3.14, 200.202.212.220, 200.28.178.156, 201.250.108.46, 201.254.70.60, 201.69.32.103, 201.75.200.14, 201.78.249.77, 201.78.44.45, 201.79.231.80, 202.159.224.102, 203.130.102.54, 207.112.75.144, 212.100.250.228, 212.13.64.34, 212.200.113.171, 213.35.240.207, 213.88.187.135, 217.126.8.20, 217.132.195.237, 217.201.98.157, 217.217.37.174, 219.167.76.36, 24.159.6.100, 41.251.77.92, 61.218.133.77, 61.228.190.117, 62.10.56.95, 62.121.98.150, 62.160.127.98, 62.163.47.215, 65.75.109.164, 66.108.114.86, 67.212.9.195, 68.49.247.242, 68.50.73.108, 69.140.227.187, 70.157.67.110, 70.74.212.68, 74.210.19.84, 75.56.196.113, 76.237.201.2, 77.198.16.123, 77.199.254.224, 78.49.37.94, 79.125.178.18, 79.144.67.3, 79.182.189.107, 79.185.99.202, 79.214.63.5, 79.3.30.112, 79.68.36.11, 80.103.139.245, 80.174.13.23, 80.39.233.159, 80.58.205.51, 80.87.83.234, 81.15.225.217, 81.174.7.203, 81.32.130.233, 81.39.118.198, 81.39.237.42, 81.56.111.140, 81.9.168.160, 82.158.133.84, 82.232.103.173, 82.236.48.113, 82.50.30.211, 83.11.55.213, 83.142.122.123, 83.180.154.106, 83.190.186.241, 83.193.233.121, 83.32.126.77, 83.32.72.86, 83.33.241.36, 83.38.107.46, 83.40.195.108, 83.41.118.115, 83.58.177.13, 83.58.43.58, 83.59.175.162, 84.121.97.47, 84.123.138.200, 84.126.198.125, 84.126.48.140, 84.127.202.66, 84.191.228.205, 84.220.255.198, 84.60.178.189, 84.78.163.126, 84.78.237.65, 84.79.131.119, 85.110.103.133, 85.127.102.35, 85.141.194.212, 85.177.37.49, 85.49.166.120, 85.56.130.241, 85.69.117.46, 85.97.110.173, 86.135.194.217, 86.200.108.23, 86.213.136.109, 86.76.79.33, 87.18.30.115, 87.188.205.181, 87.196.138.38, 87.196.81.123, 87.219.118.63, 87.219.173.197, 87.9.132.173, 88.14.164.60, 88.160.35.61, 88.169.42.11, 88.17.53.153, 88.19.54.15, 88.25.229.121, 88.27.131.88, 88.64.37.108, 88.65.93.244, 88.74.125.65, 88.84.13.115, 89.1.136.224, 89.129.61.93, 89.1.81.184, 89.210.121.228, 89.49.1.110, 89.49.62.152, 89.57.54.58, 89.7.176.231, 89.86.129.17, 90.150.209.105, 90.157.199.19, 90.28.40.116, 90.34.205.159, 91.184.77.170, 91.64.50.83, 91.90.209.95, 98.195.168.91, 213.60.48.111, 68.68.35.235, 70.119.72.53, 71.55.157.205, 80.203.87.93, 85.166.132.144, 195.1.25.8, 205.209.170.161, 205.209.170.162, 205.209.170.163, 205.209.170.164, 205.209.170.172, 205.209.170.179, 205.209.170.180, 205.209.170.202, 205.209.170.204, 205.209.170.205, 205.209.170.220, 205.209.170.221, 206.248.85.170, 165.186.249.114, 83.87.25.66, 84.163.61.127, 220.169.10.247, 83.32.223.164, 217.127.128.252, 81.44.38.136, 12.214.244.43, 75.45.236.20, 87.1.179.45, 201.58.124.209, 89.236.194.78, 213.37.178.181, 89.212.62.206, 81.23.119.226.


Bu ara Yukardaki IPleri iptables ile toplu halde nasil banlayabiliriz.


Umarim yararli bi bilgi olmustur.

HTML clipboard Kaynak

[caqlarrr]

Tesekkürler, .htaccessimdeki kötü botlar listesine ekledim.