0
Kayıt Ol

httpd get saldırısı

2

●

3.857

  • 16-09-2009, 20:28:45
    #1
    Cagatayh
    Cagatayh
    Merhaba,
    Görüldüğü gibi aşağıdai saniyeler içerisinde kaç tane saldırı gelmiş. httpd açamıyorum bile açtıktan 10 dk sürmeden çöküyor.

    Saldırılar durmadan günlerdir devam ediyor. Ne yapmamı önerirsiniz ?

    88.235.202.3 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
79.44.178.181 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
88.248.172.80 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.1; .NET CLR 2.0.50727)"
88.235.202.3 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.228.73.214 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
94.121.182.137 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
88.242.48.130 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.253.106.145 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.1)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 283 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
85.100.95.49 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; tr; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)"
88.254.129.68 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
88.246.20.187 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)"
88.226.122.126 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; MS Internet Explorer; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
78.167.16.49 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
78.190.81.101 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
92.44.233.166 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
88.228.73.214 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
79.44.178.181 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
88.235.202.3 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
88.248.172.80 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.1; .NET CLR 2.0.50727)"
88.228.73.214 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
81.6.116.139 - - [14/Sep/2009:01:07:19 +0300] "GET /favicon.ico HTTP/1.1" 301 285 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; Media Center PC 5.1)"
78.166.157.85 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; msn OptimizedIE8;TRTR)"
88.253.106.145 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.1)"
88.254.129.68 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
88.246.20.187 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)"
78.167.16.49 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 283 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.226.122.126 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; MS Internet Explorer; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
92.44.233.166 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.190.81.101 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
88.242.48.130 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.248.172.80 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.1; .NET CLR 2.0.50727)"
88.228.73.214 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
79.44.178.181 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
88.254.129.68 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
88.246.20.187 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)"
78.190.81.101 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 283 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.228.73.214 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
92.44.233.166 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
88.236.19.164 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
88.254.129.68 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
79.44.178.181 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
88.248.172.80 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.1; .NET CLR 2.0.50727)"
78.167.16.49 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
85.100.95.49 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; tr; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)"
78.190.81.101 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
88.226.122.126 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; MS Internet Explorer; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
92.44.233.166 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
81.6.116.139 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; Media Center PC 5.1)"
78.178.26.64 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
88.246.20.187 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)"
88.253.106.145 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.1)"
88.228.73.214 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
88.235.202.3 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)"
88.236.19.164 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 283 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.163.5.157 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618)"
85.96.155.81 - - [14/Sep/2009:01:07:18 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)"
94.121.182.137 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
92.44.233.166 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
88.254.129.68 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
78.178.26.64 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
78.163.5.157 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618)"
78.190.81.101 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
88.242.48.130 - - [14/Sep/2009:01:07:19 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.246.20.187 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)"
94.121.182.137 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
78.167.16.49 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
88.236.19.164 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 248 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
88.248.172.80 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.1; .NET CLR 2.0.50727)"
88.253.106.145 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.1)"
88.228.73.214 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)"
92.44.233.166 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
79.44.178.181 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)"
85.96.155.81 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)"
81.6.116.139 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; Media Center PC 5.1)"
78.178.26.64 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
88.226.122.126 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; MS Internet Explorer; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
92.44.233.166 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; Tablet PC 2.0)"
88.254.129.68 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; InfoPath.2; .NET CLR 1.1.4322)"
94.121.182.137 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
94.121.182.137 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)"
88.236.19.164 - - [14/Sep/2009:01:07:20 +0300] "GET /.php HTTP/1.1" 301 284 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6)"
  • 16-09-2009, 22:25:12
    #2
    Cagatayh
    Cagatayh
    LinuxReseller adlı üyeden alıntı: mesajı görüntüle
    rebottan sonrada bu komutu puttyde girin

    echo 1 > /proc/sys/net/ipv4/tcp_syncookies
    saldırı anında korumayı devreye sokacaktır. saldırı bittikten sonra iptablesi resetlerseniz bu koruma yine pasif olacaktır ve sunucu işlemci sömürmeyecektir.

    Saldırılar durmadan devam ediyor o yüzden iptable resetlemicem. Bu yüzden bir sorun oluşur mu ayrıca yüklemeleri denicem umarım çözülür.
  • 17-09-2009, 18:12:30
    #3
    ALTUG
    ALTUG
    Arkadaşım Selam,

    Httpd Get saldırıları dediğimiz olay USER-Agent tanımlaması yaptığı için gerçek bir kişi gibi siteyi ziyaret etmektedir. Bu sebepten ötürü önlem konusu biraz aşağı indirgemektedir.

    R10.net Neden forum'a direk sokmuyorda, Üye giriş yaptırıyor?

    Cevap: Saldırılarla başa çıkamadığı için, bilmeyenler için VB Forum SQL yüzlerce bağlantı çekimi yapmaktadır, direk index.php gelecek olan saldırılar ise makinayı resmen harap edecektir. Bu yüzden Forum için böyle bir koruma olması yararlı diye düşünüyorum.

    Forum'a giriş sayfası yaparak önlem almak ?

    Forum'un direk index.php adresine sokmayarak bu konuya hakim olabilirsiniz. Yalnız www.domain.com/index.php olarakta girmemesi gerekiyor. Google nasıl girecek sorusu ise, USER-Agent ile girecek, Google Bot genellikle google botunun kullandığı agenttır. Bu agent'ı açık bıraktığımız taktirde, sadece google botlar girecektir. Yalnız bot yapımında user-agent bağlamını eğer kendiniz belirleyin şeklinde ayarlamadılarsa..

    Makinamı biraz daha geliştirsem engel olmaz mı ?

    Evet engel olur. Sınırları zorlayabiliriz, yalnız bu Türkiye Datacenterları ile olacak iş değildir. Sebep şu makina başına verilen Mbit nedir ? 8Mbit olduğunu varsayalım yani Telekom'un bize verdiği NET Limitsiz tarifesi gibi bağlantı kullanıyorsunuz. Tek farkı ise upload'ın 8Mbit/8Mbit ile aynı olması.
    Yani demem o ki, 200-300 arası bot ile bu hattı kolayca yersiniz, hatta makinaya bile erişim sağlayamayabilirsin, swap yapıp sunucuya girememek olasılığıda bunlardan birisidir.

    Hiç saldırı yememek istiyorsan bu işi gerçekten bilen/anlayan birilerinden yardım al. Bu kişilerde Türkiye'de sayılıdır, sonuç aynıysa sana özel olarak yardımcı olabilirim. Ulu orta herkesin, herşeyi bilmesine gerek yok.
    Hiç saldırı yememek istiyorsan bu %99 mümkün ama tamamen duygusal bir durum.. Yalnız bu Türkiye location makinayla değil.

    Saygılarımla ~