• 31-12-2008, 13:34:19
    #1
    ThePlanet verimerkezi konumlu bir sunucudan, 89.107.226.36 ip adresli vps sunucumuza saldırı geliyor, Hoşki sunucu zaten kapalıydı bir iki gün önce kapandı. Hala yoğun paket saldırılar alıyoruz. ThePlanet le ilişkileri iyi olan birisi varmı acaba ? Bayi vs. İrtibat kurduk fakat bir netice alamadık.


    All time GMT +2

    10:35:38.515427 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.515519 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.515621 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.515777 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.515877 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.515977 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516126 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516269 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516380 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516476 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516576 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516725 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516818 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.516968 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.517068 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.517179 IP 74.53.249.130.33131 > 89.107.226.36.80: UDP, length 80
    10:35:38.668988 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669071 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669187 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669370 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669469 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669575 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669725 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669825 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.669920 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.670081 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.670099 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.670324 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13622q] [14640n] [16706au][|domain]
    10:35:38.670369 IP 74.53.249.130.33094 > 89.107.226.36.53: 12594 op6+% [b2&3=0x3334]
    [14136a] [13996 packets captured

    Saygılarımla..
  • 31-12-2008, 13:44:36
    #2
    theplanet çok duyarsız bize de tehdit gelmişti orda konumlu bir sunucu üzerinden.
  • 31-12-2008, 13:53:57
    #3
    IP belli sunucu yöneticinize yada datacenter yetkilisine söyleyiniz IP adresini blocklasın. Sorun kalmaz.
  • 31-12-2008, 14:04:04
    #4
    sunucuoptimizasyon.com
    verimerkezinize rica edin fiziksel firewall üzerinden bloklasınlar keşke her saldırı bu kadar kolay önlenebilse