Я тут подвергся брутфорс-атаке на 22-й порт с адреса 210.3.2.10. Internic говорит, что это кто-то из Гонконга. В связи с этим возникает вопрос: возможно ли каким-то образом узнать, откуда реально идет атака? |
moishe писал(а): с адреса 210.3.2.10. Internic говорит, что это кто-то из Гонконгаmoishe писал(а): откуда реально идет атака?У вас в условии задачи дан ответ. Этого не достаточно? Или надо точный адрес подлого китайца? |
Скорее всего анонимный сокс-прокси |
Может подлый китаец сидит где-то рядом? Возможно ли это узнать? Я вчера тот IP заблокировал, ночью была атака с другого, 61.100.12.63, на этот раз - Корея.
Хотелось бы иметь такую возможность: если с некоторого IP производится N неудачных попыток залогиниться по ssh подряд в течение T секунд, блокировать этот IP на М секунд. Существует такой сервис, или придется sshd дописывать? |
LogWatch писал(а):
Failed logins from these: abc/password from 218.38.28.132: 1 Time(s) abuse/password from 218.38.28.132: 1 Time(s) accounting/password from 218.38.28.132: 1 Time(s) adm/password from 218.38.28.132: 1 Time(s) air/password from 218.38.28.132: 1 Time(s) ako/password from 218.38.28.132: 1 Time(s) alarm/password from 218.38.28.132: 1 Time(s) alert/password from 218.38.28.132: 1 Time(s) alien/password from 218.38.28.132: 1 Time(s) amanda/password from 218.38.28.132: 1 Time(s) andrew/password from 218.38.28.132: 1 Time(s) animal/password from 218.38.28.132: 1 Time(s) anl/password from 218.38.28.132: 1 Time(s) anti/password from 218.38.28.132: 1 Time(s) art/password from 218.38.28.132: 1 Time(s) aspire/password from 218.38.28.132: 1 Time(s) audi/password from 218.38.28.132: 1 Time(s) audio/password from 218.38.28.132: 1 Time(s) auto/password from 218.38.28.132: 1 Time(s) barry/password from 218.38.28.132: 1 Time(s) bat/password from 218.38.28.132: 1 Time(s) bcr/password from 218.38.28.132: 1 Time(s) bear/password from 218.38.28.132: 1 Time(s) bill/password from 218.38.28.132: 1 Time(s) black/password from 218.38.28.132: 1 Time(s) blind/password from 218.38.28.132: 1 Time(s) blow/password from 218.38.28.132: 1 Time(s) blue/password from 218.38.28.132: 1 Time(s) blues/password from 218.38.28.132: 1 Time(s) bmw/password from 218.38.28.132: 1 Time(s) board/password from 218.38.28.132: 1 Time(s) bogdan/password from 218.38.28.132: 1 Time(s) bomb/password from 218.38.28.132: 1 Time(s) bonnie/password from 218.38.28.132: 1 Time(s) book/password from 218.38.28.132: 1 Time(s) box/password from 218.38.28.132: 1 Time(s) boy/password from 218.38.28.132: 1 Time(s) bret/password from 218.38.28.132: 1 Time(s) browser/password from 218.38.28.132: 1 Time(s) call/password from 218.38.28.132: 1 Time(s) car/password from 218.38.28.132: 1 Time(s) carmen/password from 218.38.28.132: 1 Time(s) castle/password from 218.38.28.132: 1 Time(s) caterina/password from 218.38.28.132: 1 Time(s) check/password from 218.38.28.132: 1 Time(s) christian/password from 218.38.28.132: 1 Time(s) cian/password from 218.38.28.132: 1 Time(s) clasic/password from 218.38.28.132: 1 Time(s) click/password from 218.38.28.132: 1 Time(s) clock/password from 218.38.28.132: 1 Time(s) clone/password from 218.38.28.132: 1 Time(s) cobra/password from 218.38.28.132: 1 Time(s) code/password from 218.38.28.132: 1 Time(s) coke/password from 218.38.28.132: 1 Time(s) combat/password from 218.38.28.132: 1 Time(s) create/password from 218.38.28.132: 1 Time(s) cristi/password from 218.38.28.132: 1 Time(s) custom/password from 218.38.28.132: 1 Time(s) cyrus/password from 218.38.28.132: 1 Time(s) danger/password from 218.38.28.132: 1 Time(s) danielle/password from 218.38.28.132: 1 Time(s) darren/password from 218.38.28.132: 1 Time(s) data/password from 218.38.28.132: 1 Time(s) dead/password from 218.38.28.132: 1 Time(s) default/password from 218.38.28.132: 1 Time(s) delet/password from 218.38.28.132: 1 Time(s) denied/password from 218.38.28.132: 1 Time(s) dennis/password from 218.38.28.132: 2 Time(s) design/password from 218.38.28.132: 1 Time(s) diablo/password from 218.38.28.132: 1 Time(s) diana/password from 218.38.28.132: 1 Time(s) dima/password from 218.38.28.132: 1 Time(s) disk/password from 218.38.28.132: 1 Time(s) doc/password from 218.38.28.132: 1 Time(s) doro/password from 218.38.28.132: 1 Time(s) duck/password from 218.38.28.132: 1 Time(s) dvd/password from 218.38.28.132: 1 Time(s) elisabeth/password from 218.38.28.132: 1 Time(s) empty/password from 218.38.28.132: 1 Time(s) enemy/password from 218.38.28.132: 1 Time(s) enter/password from 218.38.28.132: 1 Time(s) ericson/password from 218.38.28.132: 1 Time(s) euro/password from 218.38.28.132: 1 Time(s) extra/password from 218.38.28.132: 1 Time(s) fast/password from 218.38.28.132: 1 Time(s) fax/password from 218.38.28.132: 1 Time(s) file/password from 218.38.28.132: 1 Time(s) film/password from 218.38.28.132: 1 Time(s) finance/password from 218.38.28.132: 1 Time(s) fire/password from 218.38.28.132: 1 Time(s) firewall/password from 218.38.28.132: 1 Time(s) fish/password from 218.38.28.132: 1 Time(s) flag/password from 218.38.28.132: 1 Time(s) flat/password from 218.38.28.132: 1 Time(s) flood/password from 218.38.28.132: 1 Time(s) frances/password from 218.38.28.132: 1 Time(s) frank/password from 218.38.28.132: 1 Time(s) frodo/password from 218.38.28.132: 1 Time(s) ftp/password from 218.38.28.132: 1 Time(s) fun/password from 218.38.28.132: 1 Time(s) funny/password from 218.38.28.132: 1 Time(s) gabriel/password from 218.38.28.132: 1 Time(s) gandalf/password from 218.38.28.132: 1 Time(s) girl/password from 218.38.28.132: 1 Time(s) god/password from 218.38.28.132: 1 Time(s) gold/password from 218.38.28.132: 1 Time(s) gprs/password from 218.38.28.132: 1 Time(s) gsm/password from 218.38.28.132: 1 Time(s) gun/password from 218.38.28.132: 1 Time(s) halo/password from 218.38.28.132: 1 Time(s) harris/password from 218.38.28.132: 1 Time(s) hat/password from 218.38.28.132: 1 Time(s) hide/password from 218.38.28.132: 1 Time(s) honda/password from 218.38.28.132: 1 Time(s) host/password from 218.38.28.132: 1 Time(s) house/password from 218.38.28.132: 1 Time(s) ice/password from 218.38.28.132: 1 Time(s) ident/password from 218.38.28.132: 1 Time(s) igor/password from 218.38.28.132: 1 Time(s) image/password from 218.38.28.132: 1 Time(s) inbox/password from 218.38.28.132: 1 Time(s) info/password from 218.38.28.132: 1 Time(s) irc/password from 218.38.28.132: 1 Time(s) ircd/password from 218.38.28.132: 1 Time(s) iris/password from 218.38.28.132: 1 Time(s) ivan/password from 218.38.28.132: 1 Time(s) jack/password from 218.38.28.132: 1 Time(s) jerry/password from 218.38.28.132: 1 Time(s) jim/password from 218.38.28.132: 1 Time(s) job/password from 218.38.28.132: 1 Time(s) joe/password from 218.38.28.132: 1 Time(s) jose/password from 218.38.28.132: 1 Time(s) karl/password from 218.38.28.132: 1 Time(s) kay/password from 218.38.28.132: 1 Time(s) key/password from 218.38.28.132: 1 Time(s) kgb/password from 218.38.28.132: 1 Time(s) kid/password from 218.38.28.132: 1 Time(s) king/password from 218.38.28.132: 1 Time(s) kitty/password from 218.38.28.132: 1 Time(s) lab/password from 218.38.28.132: 1 Time(s) lake/password from 218.38.28.132: 1 Time(s) larry/password from 218.38.28.132: 1 Time(s) last/password from 218.38.28.132: 1 Time(s) lead/password from 218.38.28.132: 1 Time(s) lee/password from 218.38.28.132: 1 Time(s) lego/password from 218.38.28.132: 1 Time(s) legolas/password from 218.38.28.132: 1 Time(s) liba/password from 218.38.28.132: 1 Time(s) light/password from 218.38.28.132: 1 Time(s) list/password from 218.38.28.132: 1 Time(s) liviu/password from 218.38.28.132: 1 Time(s) local/password from 218.38.28.132: 1 Time(s) lock/password from 218.38.28.132: 1 Time(s) lord/password from 218.38.28.132: 1 Time(s) lotus/password from 218.38.28.132: 1 Time(s) lucas/password from 218.38.28.132: 1 Time(s) mac/password from 218.38.28.132: 1 Time(s) magic/password from 218.38.28.132: 1 Time(s) man/password from 218.38.28.132: 1 Time(s) marc/password from 218.38.28.132: 1 Time(s) mark/password from 218.38.28.132: 1 Time(s) markus/password from 218.38.28.132: 1 Time(s) mave/password from 218.38.28.132: 1 Time(s) media/password from 218.38.28.132: 1 Time(s) melissa/password from 218.38.28.132: 1 Time(s) memo/password from 218.38.28.132: 1 Time(s) menu/password from 218.38.28.132: 1 Time(s) michael/password from 218.38.28.132: 1 Time(s) mig/password from 218.38.28.132: 1 Time(s) mike/password from 218.38.28.132: 1 Time(s) milena/password from 218.38.28.132: 1 Time(s) mirna/password from 218.38.28.132: 1 Time(s) mobile/password from 218.38.28.132: 1 Time(s) mole/password from 218.38.28.132: 1 Time(s) monk/password from 218.38.28.132: 1 Time(s) mother/password from 218.38.28.132: 1 Time(s) music/password from 218.38.28.132: 1 Time(s) nadin/password from 218.38.28.132: 1 Time(s) named/password from 218.38.28.132: 1 Time(s) namor/password from 218.38.28.132: 1 Time(s) natasha/password from 218.38.28.132: 1 Time(s) nec/password from 218.38.28.132: 1 Time(s) nero/password from 218.38.28.132: 1 Time(s) net/password from 218.38.28.132: 1 Time(s) network/password from 218.38.28.132: 2 Time(s) nexus/password from 218.38.28.132: 1 Time(s) nice/password from 218.38.28.132: 1 Time(s) nightmare/password from 218.38.28.132: 1 Time(s) nokia/password from 218.38.28.132: 1 Time(s) note/password from 218.38.28.132: 1 Time(s) nuke/password from 218.38.28.132: 1 Time(s) office/password from 218.38.28.132: 1 Time(s) online/password from 218.38.28.132: 1 Time(s) only/password from 218.38.28.132: 1 Time(s) optic/password from 218.38.28.132: 1 Time(s) orange/password from 218.38.28.132: 1 Time(s) origin/password from 218.38.28.132: 1 Time(s) otto/password from 218.38.28.132: 1 Time(s) packing/password from 218.38.28.132: 1 Time(s) paris/password from 218.38.28.132: 1 Time(s) paula/password from 218.38.28.132: 1 Time(s) pavel/password from 218.38.28.132: 1 Time(s) peter/password from 218.38.28.132: 1 Time(s) petter/password from 218.38.28.132: 1 Time(s) phone/password from 218.38.28.132: 1 Time(s) pin/password from 218.38.28.132: 1 Time(s) pionner/password from 218.38.28.132: 1 Time(s) pistol/password from 218.38.28.132: 1 Time(s) plugin/password from 218.38.28.132: 1 Time(s) pop/password from 218.38.28.132: 1 Time(s) postfix/password from 218.38.28.132: 1 Time(s) power/password from 218.38.28.132: 1 Time(s) pretty/password from 218.38.28.132: 1 Time(s) preview/password from 218.38.28.132: 1 Time(s) privacy/password from 218.38.28.132: 1 Time(s) profile/password from 218.38.28.132: 1 Time(s) project/password from 218.38.28.132: 1 Time(s) protect/password from 218.38.28.132: 1 Time(s) proxy/password from 218.38.28.132: 1 Time(s) purchase/password from 218.38.28.132: 1 Time(s) putty/password from 218.38.28.132: 1 Time(s) quad/password from 218.38.28.132: 1 Time(s) quantum/password from 218.38.28.132: 1 Time(s) queen/password from 218.38.28.132: 1 Time(s) race/password from 218.38.28.132: 1 Time(s) rat/password from 218.38.28.132: 1 Time(s) red/password from 218.38.28.132: 1 Time(s) reichard/password from 218.38.28.132: 1 Time(s) remote/password from 218.38.28.132: 1 Time(s) reset/password from 218.38.28.132: 1 Time(s) ring/password from 218.38.28.132: 1 Time(s) ritual/password from 218.38.28.132: 1 Time(s) robison/password from 218.38.28.132: 1 Time(s) rock/password from 218.38.28.132: 1 Time(s) roman/password from 218.38.28.132: 1 Time(s) root/password from 165.228.6.44: 1 Time(s) rose/password from 218.38.28.132: 1 Time(s) run/password from 218.38.28.132: 1 Time(s) safe/password from 218.38.28.132: 1 Time(s) sales/password from 218.38.28.132: 1 Time(s) sam/password from 218.38.28.132: 1 Time(s) samples/password from 218.38.28.132: 1 Time(s) samsung/password from 218.38.28.132: 1 Time(s) sandra/password from 218.38.28.132: 1 Time(s) sara/password from 218.38.28.132: 1 Time(s) security/password from 218.38.28.132: 1 Time(s) select/password from 218.38.28.132: 1 Time(s) sensor/password from 218.38.28.132: 1 Time(s) serg/password from 218.38.28.132: 1 Time(s) sergiu/password from 218.38.28.132: 1 Time(s) service/password from 218.38.28.132: 1 Time(s) setup/password from 218.38.28.132: 1 Time(s) shell/password from 218.38.28.132: 1 Time(s) siemens/password from 218.38.28.132: 1 Time(s) silver/password from 218.38.28.132: 1 Time(s) sir/password from 218.38.28.132: 1 Time(s) slash/password from 218.38.28.132: 1 Time(s) slim/password from 218.38.28.132: 1 Time(s) smart/password from 218.38.28.132: 1 Time(s) smtp/password from 218.38.28.132: 1 Time(s) sniper/password from 218.38.28.132: 1 Time(s) soft/password from 218.38.28.132: 1 Time(s) sony/password from 218.38.28.132: 1 Time(s) sound/password from 218.38.28.132: 1 Time(s) source/password from 218.38.28.132: 1 Time(s) sparc/password from 218.38.28.132: 1 Time(s) sparky/password from 218.38.28.132: 1 Time(s) speed/password from 218.38.28.132: 1 Time(s) stan/password from 218.38.28.132: 1 Time(s) status/password from 218.38.28.132: 1 Time(s) stone/password from 218.38.28.132: 1 Time(s) stop/password from 218.38.28.132: 1 Time(s) sun/password from 218.38.28.132: 1 Time(s) super/password from 218.38.28.132: 1 Time(s) take/password from 218.38.28.132: 1 Time(s) task/password from 218.38.28.132: 1 Time(s) testuser/password from 218.38.28.132: 1 Time(s) thomas/password from 218.38.28.132: 1 Time(s) tnt/password from 218.38.28.132: 1 Time(s) tone/password from 218.38.28.132: 1 Time(s) tony/password from 218.38.28.132: 1 Time(s) top/password from 218.38.28.132: 1 Time(s) trade/password from 218.38.28.132: 1 Time(s) travel/password from 218.38.28.132: 1 Time(s) trust/password from 218.38.28.132: 1 Time(s) ultra/password from 218.38.28.132: 1 Time(s) unknown/password from 218.38.28.132: 1 Time(s) ural/password from 218.38.28.132: 1 Time(s) vicky/password from 218.38.28.132: 1 Time(s) virgine/password from 218.38.28.132: 1 Time(s) virtual/password from 218.38.28.132: 1 Time(s) vivas/password from 218.38.28.132: 1 Time(s) wanda/password from 218.38.28.132: 1 Time(s) wap/password from 218.38.28.132: 1 Time(s) war/password from 218.38.28.132: 1 Time(s) warez/password from 218.38.28.132: 1 Time(s) wave/password from 218.38.28.132: 1 Time(s) witch/password from 218.38.28.132: 1 Time(s) wizard/password from 218.38.28.132: 1 Time(s) xpl/password from 218.38.28.132: 1 Time(s) xxl/password from 218.38.28.132: 1 Time(s) yahoo/password from 218.38.28.132: 1 Time(s) yes/password from 218.38.28.132: 1 Time(s) zone/password from 218.38.28.132: 1 Time(s) zoom/password from 218.38.28.132: 1 Time(s) Я бы тоже хотел иметь такую возможность ![]() |
Нарыл лишь ЭТО
|
ЭТО я тоже видел, только иначе понял:
после 5 неавторизованных подключений отвергать 50% попыток подключиться, и не давать подключиться, если уже имеется 10 неавторизованных подключений. Согласись, "неправильная регистрация" и "неавторизованное подключение" - не одно и то же. Интересно, а что имеется в виду на самом деле? |
Попробывал, имеется ввиду 5 попыток ввода пароля. При атаке такого не происходит. Для каждого юзера пароль вводится 1 раз. |
Может у уважаемого xdsl мысли будут по этому поводу? |
А он еще жив? |
Slin писал(а): А он еще жив?Типун тебе на язык. |
Я думаю он имел в виду не в опуске ли он?
Лето ведь или щас люди поступают в ПЕд? |
Fakir писал(а): Slin писал(а): А он еще жив?Типун тебе на язык. ![]() |
c 29-го июня... |
Могу дать прогу для скрытия ип, ип меняется каждые несколько сек |
А не ее я недам |
Serious, ты не понял, нужна "прога" не для скрытия ip, а наоборот, для раскрытия. |
и как это работать в сетке будет, если в сети нашей ип жестко залочены _________________ Ин дер гросен фамилие нихт клювен клац-клац ![]() |
ип меняется только в броузере, так ип не меняется _________________ Админ, прежде всего, - царь и бох, а потом уже читак и `Вырезано цензурой`. |
Модераторы, почистите всё, что не касается ssh |
Andy молодца, в нашей сетки правда она не робит, но она вполне робочая прога, знакомый из инета юзал и у его \все менялось |
всё равно не верю. в инете тоже ип-ы жестко закреплены _________________ Ин дер гросен фамилие нихт клювен клац-клац ![]() |
Незнаю я ей не пользуюсь |
Интернет писал(а): Спуфинг – это отправка пакета с подменом его исходящего IP. Допустим на нужном тебе компе работает фаерволл разрешающий коннект только с определенных IP-адресов – в таком случае ты меняешь свой IP на тот самый «определенный IP-адрес» и фаерволл тебя успешно пропускает. |
но и ответы обратно тебе не получить. а тут речь идет о нормальной работе.
разве что твоя нормальная работа - ддосить хосты конкурентов _________________ Ин дер гросен фамилие нихт клювен клац-клац ![]() |
кстати подмену исходящего адреса легко сделать даже в дельфи. есть там (в винде) формирование RAW пакетов. а в RAW пожешь всё запистаь _________________ Ин дер гросен фамилие нихт клювен клац-клац ![]() |
|
Вы не можете начинать темы Вы не можете отвечать на сообщения Вы не можете редактировать свои сообщения Вы не можете удалять свои сообщения Вы не можете голосовать в опросах Вы не можете вкладывать файлы Вы можете скачивать файлы |