• 24-10-2020, 20:20:08
    #1
    Aşağıda ki e-postayı aldım VPS firması tarafından, nereden nasıl saldırı olduğunu bulamadım, ne yapmam gerekiyor? Adamların 72.xxx.yyy.zzz numaralı IP adresini sunucu üzerinde blocklamak aklıma geldi, bu sorunu nasıl düzeltirim, düzeltemez isem bu IP adresini nasıl bloklarım? Yani curl 72.xxx.yyy.zzz yi çalıştırdığım zaman sunucu bu siteyi bulamasın

    ******************

    Hi,

    This is an automatically email abuse report about the IP address 165.74.xxx.yyy generated at Fri Oct 23 16:35:33 EDT 2020 , please do not reply to it.
    If you have any queries regarding this message, please contact us to abuse@funio.com.

    Our IP is [72].[a].[b].[X]

    The final octet of our server's IP address is masked in the above output because some automatic parsers become confused when multiple IP addresses are included. The value of that octet is 38.

    We detected a network attack from your network, a computer connected to it is probably infected and being part of a botnet.

    Please check it and fix it up as soon as possible.

    The following intrusion attempts were detected:

    ./propexample.com:165.74.xxx.yyy - - [23/Oct/2020:03:51:27 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample.com:165.74.xxx.yyy - - [23/Oct/2020:03:51:28 -0400] "GET /beta/wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample/propexample.com:165.74.xxx.yyy - - [23/Oct/2020:03:51:27 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample/propexample.com:165.74.xxx.yyy - - [23/Oct/2020:03:51:28 -0400] "GET /beta/wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample/propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:03:51:42 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample/propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:03:51:44 -0400] "GET /beta/wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample/propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:04:16:22 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 404 24457 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:03:51:42 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 301 - "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:03:51:44 -0400] "GET /beta/wp-admin/admin-ajax.php HTTP/1.1" 200 1 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"
    ./propexample.com-ssl_log:165.74.xxx.yyy - - [23/Oct/2020:04:16:22 -0400] "POST /beta/wp-admin/admin-ajax.php HTTP/1.1" 404 24457 "-" "Mozilla/5.2 (Windows NT 6.1; WOW64) AppleWebKit/5371q23.13 (KHTML, like Gecko) Safari/537.13"

    The following e-mail address is listed as the official abuse contact for IP 165.74.xxx.yyy :

    Thank you for your collaboration.
  • 24-10-2020, 20:33:19
    #2
    Htacces dosyasına bu komutlari ekle

    Order Deny, Allow
    Deny from iipadreyaz
  • 24-10-2020, 20:42:16
    #3
    wehwet adlı üyeden alıntı: mesajı görüntüle
    Htacces dosyasına bu komutlari ekle

    Order Deny, Allow
    Deny from iipadreyaz
    bu benden o ipye giden requestlerimi engeller, o siteden bana gelen requestlerimi engeller, benden gidiyor requestler, bir de 30 site var hangi htaccess e yazmam gerekecek