چجوری جلوی این حملاتو بگیرم syn (SYN_RECV) flood attacks

**Woshka** · January 4th, 2010, 13:38

تازه اینکه چیزی نیست
یه بار whois گرفتم دیدم زده مرکز بهداستی درمانی گناون همچین جایی

اینها همه جا نفوز دارند

---------- Post added at 01:26 PM ---------- Previous post was at 01:22 PM ----------

ببا این بلاک کردنا ویزیت دیروز 2000 تا شد
پریروز 7000 تا بوده
یعنی 5000 تا کاهش p-:

---------- Post added at 01:38 PM ---------- Previous post was at 01:26 PM ----------

دوباره حمله

root@box01 [~]# netstat -an|grep SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1200 SYN_RECV
tcp 0 0 74.81.90.66:80 213.217.40.136:55677 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.193.3:1303 SYN_RECV
tcp 0 0 74.81.90.73:80 91.75.24.3:34748 SYN_RECV
tcp 0 0 74.81.90.77:80 217.218.209.34:12663 SYN_RECV
tcp 0 0 74.81.90.66:80 93.158.151.24:57468 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.97.160:1067 SYN_RECV
tcp 0 0 74.81.90.77:80 65.49.14.10:45540 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.246.4:11427 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:61466 SYN_RECV
tcp 0 0 74.81.90.77:80 188.136.142.7:56833 SYN_RECV
tcp 0 0 74.81.90.77:80 212.16.89.147:59788 SYN_RECV
tcp 0 0 74.81.90.77:80 79.127.122.10:3277 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:61508 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4343 SYN_RECV
tcp 0 0 74.81.90.73:80 91.75.24.3:37111 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:3402 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4324 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:4444 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4339 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.69.192:2479 SYN_RECV
tcp 0 0 74.81.90.77:80 86.96.228.86:9442 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.97.160:1041 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:3151 SYN_RECV
tcp 0 0 74.81.90.66:80 82.99.201.219:7372 SYN_RECV
tcp 0 0 74.81.90.77:80 85.185.238.162:61664 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.94.149:1361 SYN_RECV
tcp 0 0 74.81.90.77:80 92.50.19.81:4677 SYN_RECV
tcp 0 0 74.81.90.77:80 217.218.209.34:10772 SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1201 SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1191 SYN_RECV
tcp 0 0 74.81.90.74:80 213.207.216.224:49968 SYN_RECV
tcp 0 0 74.81.90.73:80 80.191.156.2:39827 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:2883 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.123.192:48353 SYN_RECV
tcp 0 0 74.81.90.77:80 94.182.236.5:55576 SYN_RECV
tcp 0 0 74.81.90.77:80 85.9.123.56:2226 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.123.192:39662 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:52984 SYN_RECV
tcp 0 0 74.81.90.77:80 78.157.59.226:60379 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.194.41:26819 SYN_RECV
tcp 0 0 74.81.90.77:80 213.217.40.100:18987 SYN_RECV
tcp 0 0 74.81.90.77:80 77.237.178.34:7117 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.69.192:2427 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.194.41:30527 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49239 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49214 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49222 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49217 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49229 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49242 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49224 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49219 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49221 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49216 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49218 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49220 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49227 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49235 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49233 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49249 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49248 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49234 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49215 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49223 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49237 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49226 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49230 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49243 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49238 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49228 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49231 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49250 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49232 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49246 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49245 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49247 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49240 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49251 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49252 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49225 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49253 SYN_RECV

---------- Post added at 01:38 PM ---------- Previous post was at 01:38 PM ----------

دوباره حمله

root@box01 [~]# netstat -an|grep SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1200 SYN_RECV
tcp 0 0 74.81.90.66:80 213.217.40.136:55677 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.193.3:1303 SYN_RECV
tcp 0 0 74.81.90.73:80 91.75.24.3:34748 SYN_RECV
tcp 0 0 74.81.90.77:80 217.218.209.34:12663 SYN_RECV
tcp 0 0 74.81.90.66:80 93.158.151.24:57468 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.97.160:1067 SYN_RECV
tcp 0 0 74.81.90.77:80 65.49.14.10:45540 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.246.4:11427 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:61466 SYN_RECV
tcp 0 0 74.81.90.77:80 188.136.142.7:56833 SYN_RECV
tcp 0 0 74.81.90.77:80 212.16.89.147:59788 SYN_RECV
tcp 0 0 74.81.90.77:80 79.127.122.10:3277 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:61508 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4343 SYN_RECV
tcp 0 0 74.81.90.73:80 91.75.24.3:37111 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:3402 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4324 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:4444 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.198.25:4339 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.69.192:2479 SYN_RECV
tcp 0 0 74.81.90.77:80 86.96.228.86:9442 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.97.160:1041 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:3151 SYN_RECV
tcp 0 0 74.81.90.66:80 82.99.201.219:7372 SYN_RECV
tcp 0 0 74.81.90.77:80 85.185.238.162:61664 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.94.149:1361 SYN_RECV
tcp 0 0 74.81.90.77:80 92.50.19.81:4677 SYN_RECV
tcp 0 0 74.81.90.77:80 217.218.209.34:10772 SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1201 SYN_RECV
tcp 0 0 74.81.90.77:80 95.38.24.254:1191 SYN_RECV
tcp 0 0 74.81.90.74:80 213.207.216.224:49968 SYN_RECV
tcp 0 0 74.81.90.73:80 80.191.156.2:39827 SYN_RECV
tcp 0 0 74.81.90.77:80 217.219.47.12:2883 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.123.192:48353 SYN_RECV
tcp 0 0 74.81.90.77:80 94.182.236.5:55576 SYN_RECV
tcp 0 0 74.81.90.77:80 85.9.123.56:2226 SYN_RECV
tcp 0 0 74.81.90.77:80 80.191.123.192:39662 SYN_RECV
tcp 0 0 74.81.90.77:80 91.186.212.14:52984 SYN_RECV
tcp 0 0 74.81.90.77:80 78.157.59.226:60379 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.194.41:26819 SYN_RECV
tcp 0 0 74.81.90.77:80 213.217.40.100:18987 SYN_RECV
tcp 0 0 74.81.90.77:80 77.237.178.34:7117 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.69.192:2427 SYN_RECV
tcp 0 0 74.81.90.77:80 78.39.194.41:30527 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49239 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49214 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49222 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49217 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49229 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49242 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49224 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49219 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49221 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49216 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49218 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49220 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49227 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49235 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49233 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49249 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49248 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49234 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49215 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49223 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49237 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49226 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49230 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49243 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49238 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49228 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49231 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49250 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49232 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49246 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49245 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49247 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49240 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49251 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49252 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49225 SYN_RECV
tcp 0 0 127.0.0.1:443 127.0.0.1:49253 SYN_RECV

موضوع: چجوری جلوی این حملاتو بگیرم syn (SYN_RECV) flood attacks

ابزارهای موضوع

نحوه نمایش موضوع

Threaded View

پاسخ : چجوری جلوی این حملاتو بگیرم syn (SYN_RECV) flood attacks

تعداد تشکر ها از Woshka به دلیل پست مفید

اطلاعات موضوع

کاربرانی که در حال مشاهده این موضوع هستند

موضوعات مشابه

مشکلudp Dns attacks در هتزنر

حمله دی داس از نوع syn_recv از ایران !!

راهنمایی در مورد مقابله با DNS Amplification Attacks

آیا csf Brute-force attacks را هم گزارش میده؟

جلوگیری از حملات به صورت دستی syn (SYN_RECV) flood attacks

مجوز های ارسال و ویرایش