500.000 TTnet ipsi tarafından yapılan botnet saldırsı - Sayfa 2

24-10-2008, 00:30:36

#10

DHS

730 Bin

24-10-2008, 00:32:43

#11

~~entpack~~

Üyeliği durduruldu

oturup izlemekten başka çare varmı harun

24-10-2008, 00:33:08

#12

DHS

750 bin üzeri şu anda baglantı sayısı çoğu farklı en fazla 100 200 tanesi aynı ipden 5 6 tane baglantı yapmış zaten 5 bağlantı yapanı mikrotik banlıyor onlar sadece banlanmayanlar

24-10-2008, 00:34:01

#13

DHS

entpack adlı üyeden alıntı: mesajı görüntüle

oturup izlemekten başka çare varmı harun

Var abi etherneti çekeceksin arkadan

yada null ediceksin ip adresini ana sunucu olduğu için ikisinide yapmayacağım mikrotik ne kadar dayanacak merak ediyorum

Buyrun buda yeni ekleyene kadar 800 bin oldu

24-10-2008, 00:36:35

#14

~~entpack~~

Üyeliği durduruldu

benim untangle bugün 1 kere bayıldı en son hat arasından çıkarttım eso-es.net`ede telefon açtım yaşasın diyorum bu gecede beklerim sonrasında ne olur bilmem.

24-10-2008, 00:38:21

#15

Elazığlı168

sunucuoptimizasyon.com

O kadar sayıda türk zombisi olan duymadım görmedim zaten mümkünde değildir o kadar aktif ip adresinin belli bir yere uzun süre istek göndermesine telekom müdahale eder.Telekom iplerine spoof edilmiş bir saldırı olabilir yoksa bu saldırının 20 de 1 kısmına bile mikrotik makinanın ethernet kartı trafik geçiremez yanıltma olabilir yani

Kaba hesap yaparsa 600000 ipin her biri 32 bytelik paket gönderse saniyede 153 mbit istek yapar

24-10-2008, 00:41:28

#16

DHS

çogu farklı ip ddos olsa sadece anlayacağım hadi 200 300 400 bin tanesi listede aynı olsun 400 bin ip nedemek kimde var bu kadar botnet amacı ne neden saldırıyor ?

24-10-2008, 00:47:06

#17

Elazığlı168

sunucuoptimizasyon.com

DHS adlı üyeden alıntı: mesajı görüntüle

çogu farklı ip ddos olsa sadece anlayacağım hadi 200 300 400 bin tanesi listede aynı olsun 400 bin ip nedemek kimde var bu kadar botnet amacı ne neden saldırıyor ?

Harun bey demek istediğim iplerin sahte olabileceği yönünde telekom adsl ip bloklarının listesi çıkarılıp yurtdışındaki zombiler telekom ipi gibi gösterilebilir yada ortada hiçbir zombi bile olmayabilir juno.c nin kod yapısı değişitirilip tüm giden ipler sallama ipler yerine istenen ülkelerin ip blokları gibi gösterilebiliyor kısacası mümkün değil olarak nitelendiriyorum oradaki iplerin çok büyük kısmı sahte istekler ve ipler olabileceğini düşünüyorum

24-10-2008, 00:47:47

#18

DHS

tcp 0 0 77.92.151.221:80 88.231.229.200:4985 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25647 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28458 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27647 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11355 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26489 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10670 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14114 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:19042 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25110 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:18772 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18958 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14832 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11614 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25783 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27313 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:4970 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18961 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:17682 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20418 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28149 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14684 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:24693 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11684 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20514 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22857 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2859 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22333 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:17807 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25093 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:13863 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:15672 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16384 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22834 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2612 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25402 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:3031 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20370 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22484 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:13761 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:21796 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25756 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16194 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25307 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:3016 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:13940 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23119 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18256 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:18922 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23031 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2961 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11787 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27189 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27618 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20804 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20652 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16761 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29268 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10783 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26651 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:21295 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:24419 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20786 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:18749 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16570 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23291 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10574 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11154 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10927 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:19281 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:19397 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:13705 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26253 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:21577 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29998 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29817 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22972 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23429 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:17354 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22522 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:17806 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2916 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28412 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:17918 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16529 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14899 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11062 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10729 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:19994 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10942 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29557 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:21499 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23305 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:13744 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26874 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:17878 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18959 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27393 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26284 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:15606 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:24793 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16122 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10428 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16790 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14387 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27681 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:19508 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28186 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25443 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2672 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:11093 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18800 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:15914 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29969 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22991 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27037 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2642 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:19669 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:17592 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16267 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14467 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27060 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26174 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:19598 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:19129 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:15075 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18957 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:19872 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:29687 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27518 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25865 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22073 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:19873 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2843 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2657 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:15476 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28954 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28459 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:23379 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:20822 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.202.78:18648 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10865 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22449 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:21514 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:26989 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:17772 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:25083 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:10914 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:18404 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:12414 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2828 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:28120 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:14766 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:12209 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:22138 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:16650 SYN_RECV
tcp 0 0 77.92.151.221:80 88.230.206.134:27203 SYN_RECV
tcp 0 0 77.92.151.221:80 88.231.229.200:2627 SYN_RECV

Mikrotikden kaçan ipler... onlarıda csf hallediyor