کسی به سرور مجازیم نفوذ میکنه.نیازمند راهنمایی هستم!

[a1994n1373]

از این آموزش استفاده کنید :

https://bia2host.com/blog/windows-server-2008-abuse/

[Meistero]

اینم یک لینک و 3 اسکرین شات از علتهای Abuse:

https://bitninja.io/incidentReport.p...ent=publicpage.


https://screenshot.net/xgz0rcg

https://screenshot.net/l0p8ouz

https://screenshot.net/l28jqhg

با سپاس

- - - Updated - - -

سلام برادر عزیز جدیدا یه چیزای هست بهش میگن بکدور شما هرچی پسورد عوض کنی یوزر عوض کنی بازم کسی که هک کرده میتونه بیاد داخل .. راه چندتا داره ولی خب شما ویندوز یا .. رو عوض کن بعد هم نگاه کن چه یوزر هایی تو سرور.مجازیت هست به جز خودت

درود بر شما!

بجز خودم هیچ یوزر دیگه ای نبود!
این برنامه Backdoor چطور آدرس میگیره؟ IP بهش میدن سرور اون IP رو پیدا و اسکن میکنه؟
اگر اینطور باشه با تغییر رنج ip ممکنه مشکل حل بشه؟

[Meistero]

<pre style='padding:10px 20px; background:#e6e6e6;margin-bottom:10px'>tcp
0 0 185.7.35.17:80 107.160.203.235:16822 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16804 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16617 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16571 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16963 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16653 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16782 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16592 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16727 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16635 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16863 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17032 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17086 ESTABLISHED
tcp 2052 0 185.7.35.17:80 107.160.203.235:17244 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17446 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17081 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17259 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17537 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16623 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16674 ESTABLISHED
..85 more lines.
]</pre><pre style='padding:10px 20px;
background:#e6e6e6;margin-bottom:10px'>tcp 0 0 185.7.35.17:80
107.160.203.235:17717 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17681 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16822 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16804 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16963 ESTABLISHED
tcp 0 824 185.7.35.17:80 107.160.203.235:16653 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16782 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16727 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17594 ESTABLISHED
tcp 0 824 185.7.35.17:80 107.160.203.235:16635 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17589 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16863 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17032 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17086 ESTABLISHED
tcp 2052 0 185.7.35.17:80 107.160.203.235:17244 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17446 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17081 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17259 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:17537 ESTABLISHED
tcp 0 0 185.7.35.17:80 107.160.203.235:16674 ESTABLISHED
..99 more lines.
]</pre><pre style='padding:10px 20px;
background:#e6e6e6;margin-bottom:10px'>Url:
[peliculeros.nethttps://peliculeros.net/]
Remote connection [107.160.203.235:30280]