LINUX.ORG.RU
ФорумAdmin

Ddos атака с множественних IP cpsc.gov

 , , ,


0

2

Сервер Linux OpenSuse 11.4 fail2ban поставил не помогает чет В iptables столько адресов не забью Помогите, а то я новичок тут

Взято из var/log/messages:
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19  named[2826]: last message repeated 6 times
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19  named[2826]: last message repeated 4 times
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19  named[2826]: last message repeated 2 times
Jul 25 09:51:19 ulct-tux named[2826]: client 209.170.72.78#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19 ulct-tux named[2826]: client 156.10.36.32#26365: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:19  named[2826]: last message repeated 2 times
Jul 25 09:51:19 ulct-tux named[2826]: client 98.126.12.149#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 6 times
Jul 25 09:51:20 ulct-tux named[2826]: client 36.250.228.176#40567: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 14 times
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 29 times
Jul 25 09:51:20 ulct-tux named[2826]: client 83.222.110.8#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 21 times
Jul 25 09:51:20 ulct-tux named[2826]: client 162.221.6.3#27635: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 14 times
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 8 times
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 5 times
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 96.32.43.106#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20 ulct-tux named[2826]: client 43.230.112.103#4444: query: cpsc.gov IN ANY +E (93.178.254.18)
Jul 25 09:51:20  named[2826]: last message repeated 7 times


Последнее исправление: Falcon-peregrinus (всего исправлений: 3)
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.