درخواست کمک برای پاسخگویی ب ابیوز (ovh)
سلام ، دوستان امروز برای یکی از ای پی ها ابیوز اومده :
کد:Dear Customer, Abnormal activity has been detected on 178.32.144.214. Please don't hesitate to contact out technical support team so that this situation does not become critical. You can find the logs brought up by our system which lead to this alert. - START OF ADDITIONAL INFO - Attack detail : 8K scans dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason 2014.09.01 10:28:01 CEST 178.32.144.214:65406 5.39.10.84:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65408 5.39.10.221:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65410 5.39.11.79:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65524 5.39.12.35:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65525 5.39.12.36:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65529 5.39.12.40:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65531 5.39.12.42:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65528 5.39.12.39:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65530 5.39.12.41:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65523 5.39.12.34:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65526 5.39.12.37:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65527 5.39.12.38:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65533 5.39.12.44:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:49157 5.39.12.46:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65507 5.39.12.18:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65506 5.39.12.17:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65508 5.39.12.19:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65514 5.39.12.25:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65517 5.39.12.28:3389 TCP SYN 52 SCAN:SYN 2014.09.01 10:28:01 CEST 178.32.144.214:65516 5.39.12.27:3389 TCP SYN 52 SCAN:SYN - END OF ADDITIONAL INFO - Regards, OVH Customer Support.لطفا راهنمایی کنید ، باید چیکار کنم ؟کد:Dear Customer, The IP address 178.32.144.214 had to be blocked by our services due to the various alerts received. Please don't hesitate to contact out technical support team so that this situation does not become critical. You can find the logs brought up by our system which lead to this alert. - START OF ADDITIONAL INFO - Attack detail : 12K scans dateTime srcIp:srcPort dstIp:dstPort protocol flags bytes reason 2014.09.01 10:34:01 CEST 178.32.144.214:58769 5.135.223.220:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58771 5.135.223.222:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:61731 5.135.230.92:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58774 5.135.223.225:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:61728 5.135.230.90:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:63187 5.135.233.12:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:63191 5.135.233.15:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58795 5.135.223.253:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58793 5.135.223.251:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58794 5.135.223.252:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58797 5.135.223.255:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:63189 5.135.233.13:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:63190 5.135.233.14:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58796 5.135.223.254:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58824 5.135.224.24:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58825 5.135.224.25:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58830 5.135.224.30:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58827 5.135.224.27:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58831 5.135.224.31:3389 TCP SYN 48 SCAN:SYN 2014.09.01 10:34:01 CEST 178.32.144.214:58826 5.135.224.26:3389 TCP SYN 48 SCAN:SYN - END OF ADDITIONAL INFO - Regards, OVH Customer Support.
پاسخ با نقل قول