Защищайтесь от ботнета : Беседка

OlegON · █ 07.10.2009 08:57

Судя по всему, ботнет, перебирающий пароли к телнету, расширяется. Список попыток влезть на мой комп все растет, вот например:

Цитата:

Tue Oct 6 08:37:54 MSD 2009 -- 190.253.244.128:23 - Colombia :: Bogota
Tue Oct 6 09:52:38 MSD 2009 -- 85.55.134.84:23 - Spain :: Zaragoza
Tue Oct 6 11:52:48 MSD 2009 -- 189.58.76.242:23 - Brazil :: Foz Do Iguac,u
Tue Oct 6 12:17:15 MSD 2009 -- 201.86.110.39:23 - Brazil :: Rolandia
Tue Oct 6 13:09:43 MSD 2009 -- 188.114.19.44:23 - Russian Federation :: Rostov
Tue Oct 6 13:50:08 MSD 2009 -- 201.236.245.242:23 - Colombia :: Pereira
Tue Oct 6 14:08:04 MSD 2009 -- 190.128.108.220:23 - Colombia :: Pereira
Tue Oct 6 14:12:59 MSD 2009 -- 190.128.100.104:23 - Colombia :: Pereira
Tue Oct 6 14:13:14 MSD 2009 -- 203.185.29.143:22 - Hong Kong :: Tin Shui Wai
Tue Oct 6 14:13:41 MSD 2009 -- 190.128.100.191:23 - Colombia :: Pereira
Tue Oct 6 14:13:49 MSD 2009 -- 190.232.119.183:23 - Peru :: Santa Anita
Tue Oct 6 14:17:13 MSD 2009 -- 190.233.78.120:23 - Peru :: Lima
Tue Oct 6 14:18:03 MSD 2009 -- 62.139.202.207:23 - Egypt :: Unknown
Tue Oct 6 14:21:48 MSD 2009 -- 189.58.83.199:23 - Brazil :: Foz Do Iguac,u
Tue Oct 6 14:49:18 MSD 2009 -- 189.41.73.81:23 - Brazil :: Itumbiara
Tue Oct 6 14:55:19 MSD 2009 -- 217.67.230.4:22 - Netherlands :: Capelle
Tue Oct 6 14:55:22 MSD 2009 -- 77.49.7.85:23 - Greece :: Athens
Tue Oct 6 15:17:00 MSD 2009 -- 190.41.141.207:23 - Peru :: Trujillo
Tue Oct 6 15:17:28 MSD 2009 -- 190.136.61.25:23 - Argentina :: Buenos Aires
Tue Oct 6 16:30:47 MSD 2009 -- 189.70.201.165:23 - Brazil :: Recife
Tue Oct 6 17:00:58 MSD 2009 -- 200.121.151.102:23 - Peru :: Lima
Tue Oct 6 19:39:53 MSD 2009 -- 190.52.131.2:23 - Paraguay :: Asuncion
Tue Oct 6 19:48:21 MSD 2009 -- 87.117.169.128:23 - Russian Federation :: Kazan
Tue Oct 6 20:11:31 MSD 2009 -- 201.86.29.19:23 - Brazil :: Curitiba
Tue Oct 6 22:16:54 MSD 2009 -- 123.19.34.15:23 - Vietnam :: Hanoi
Tue Oct 6 22:53:33 MSD 2009 -- 83.44.40.55:23 - Spain :: El Puig
Tue Oct 6 23:21:22 MSD 2009 -- 83.22.1.143:23 - Poland :: Ruda Slaska
Wed Oct 7 00:21:33 MSD 2009 -- 213.96.41.177:23 - Spain :: Arenys De Mar
Wed Oct 7 01:06:38 MSD 2009 -- 85.50.239.185:23 - Spain :: Barcelona
Wed Oct 7 01:22:14 MSD 2009 -- 87.218.225.209:23 - Spain :: Madrid
Wed Oct 7 01:48:58 MSD 2009 -- 88.11.240.31:23 - Spain :: Castellote
Wed Oct 7 02:11:03 MSD 2009 -- 190.65.19.135:23 - Colombia :: Florencia
Wed Oct 7 02:14:46 MSD 2009 -- 201.86.38.80:23 - Brazil :: Curitiba
Wed Oct 7 02:56:37 MSD 2009 -- 189.26.91.110:23 - Brazil :: Maringa
Wed Oct 7 03:57:15 MSD 2009 -- 84.254.193.85:23 - Russian Federation :: Tyumen
Wed Oct 7 04:04:28 MSD 2009 -- 189.15.227.119:23 - Brazil :: Uberlandia
Wed Oct 7 04:20:02 MSD 2009 -- 189.59.54.150:23 - Brazil :: Cuiaba
Wed Oct 7 05:49:21 MSD 2009 -- 212.106.47.139:23 - Russian Federation :: Obninsk

И это не самый длинный.

twix · █ 07.10.2009 09:33

тут, кстати, сегодня был пост на хабре про простую защиту от небольших атак. правда, ДДОС.
но два пункта могут и здесь пригодиться

http://ibbi.habrahabr.ru/blog/71694/

а вообще, закрой сашку для всех, кроме своих машин... или на другой порт перенеси

OlegON · █ 07.10.2009 10:10

Что я с сашкой сделал - не скажу из соображений безопасности :) А что по поводу поста на хабре, то там для патченного iptables и вообще это ближе к этой теме.

OlegON · █ 16.10.2009 08:41

Ситуация ухудшается... Попадаются и наши...
Нужен ли кому-то такой список в онлайне? Могу скидывать на веб.

Цитата:

Thu Oct 15 07:05:09 MSD 2009 -- 190.232.83.114:23 - Peru :: Lima
Thu Oct 15 07:08:00 MSD 2009 -- 91.140.204.138:23 - Kuwait :: Unknown
Thu Oct 15 07:19:21 MSD 2009 -- 81.32.112.219:23 - Spain :: Terrassa
Thu Oct 15 07:20:33 MSD 2009 -- 87.18.91.46:23 - Italy :: Capri
Thu Oct 15 07:53:45 MSD 2009 -- 189.58.126.150:23 - Brazil :: Ponta Grossa
Thu Oct 15 08:04:11 MSD 2009 -- 190.40.202.178:23 - Peru :: Tarapoto
Thu Oct 15 08:09:48 MSD 2009 -- 189.26.156.149:23 - Brazil :: Joinville
Thu Oct 15 08:22:11 MSD 2009 -- 189.115.23.104:23 - Brazil :: Tubarao
Thu Oct 15 08:28:16 MSD 2009 -- 190.232.3.133:23 - Peru :: Lima
Thu Oct 15 08:32:01 MSD 2009 -- 189.58.37.85:23 - Brazil :: Maringa
Thu Oct 15 08:39:46 MSD 2009 -- 189.25.163.54:23 - Brazil :: Rio De Janeiro
Thu Oct 15 08:55:46 MSD 2009 -- 200.106.11.244:23 - Peru :: Lima
Thu Oct 15 09:02:09 MSD 2009 -- 200.106.86.158:23 - Peru :: Lima
Thu Oct 15 09:21:05 MSD 2009 -- 190.40.44.48:23 - Peru :: Lima
Thu Oct 15 09:28:09 MSD 2009 -- 60.48.224.223:23 - Malaysia :: Kuala Lumpur
Thu Oct 15 09:34:44 MSD 2009 -- 200.121.46.241:23 - Peru :: Lima
Thu Oct 15 10:00:11 MSD 2009 -- 200.121.197.196:23 - Peru :: Lima
Thu Oct 15 10:07:25 MSD 2009 -- 190.41.161.129:23 - Peru :: Lima
Thu Oct 15 10:33:38 MSD 2009 -- 190.43.187.208:23 - Peru :: Lima
Thu Oct 15 10:34:56 MSD 2009 -- 91.99.234.215:23 - Iran, Islamic Republic of :: Pars
Thu Oct 15 10:50:57 MSD 2009 -- 93.147.89.252:23 - Italy :: Ercolano
Thu Oct 15 11:43:24 MSD 2009 -- 82.49.20.152:23 - Italy :: Orta Nova
Thu Oct 15 11:57:29 MSD 2009 -- 190.43.123.128:23 - Peru :: Lima
Thu Oct 15 12:26:09 MSD 2009 -- 85.175.159.185:3389 - Russian Federation :: Krasnodar
Thu Oct 15 12:41:28 MSD 2009 -- 151.51.21.71:23 - Italy :: Rimini
Thu Oct 15 15:06:23 MSD 2009 -- 190.66.196.6:23 - Colombia :: Ibague
Thu Oct 15 15:44:54 MSD 2009 -- 87.11.8.86:21 - Italy :: Lucca
Thu Oct 15 15:47:14 MSD 2009 -- 189.106.163.82:23 - Brazil :: Nova Iguac,u
Thu Oct 15 17:23:10 MSD 2009 -- 190.233.13.240:23 - Peru :: Miraflores
Thu Oct 15 22:32:55 MSD 2009 -- 41.234.53.114:23 - Egypt :: Cairo
Thu Oct 15 22:41:09 MSD 2009 -- 89.41.253.70:23 - Romania :: Iasi
Fri Oct 16 00:26:06 MSD 2009 -- 78.166.19.100:23 - Turkey :: Nevsehir
Fri Oct 16 01:10:43 MSD 2009 -- 60.161.243.36:22 - China :: Beijing
Fri Oct 16 01:14:48 MSD 2009 -- 88.247.63.13:23 - Turkey :: Kayseri
Fri Oct 16 01:32:51 MSD 2009 -- 80.30.129.119:23 - Spain :: El Vendrell
Fri Oct 16 01:41:20 MSD 2009 -- 78.187.175.11:23 - Turkey :: Van
Fri Oct 16 01:41:21 MSD 2009 -- 78.179.116.107:23 - Turkey :: Istanbul
Fri Oct 16 01:43:29 MSD 2009 -- 88.249.30.182:23 - Turkey :: Gaziantep
Fri Oct 16 01:53:38 MSD 2009 -- 91.207.192.132:21 - United Kingdom :: Nottingham
Fri Oct 16 02:13:57 MSD 2009 -- 190.41.82.34:23 - Peru :: Lima
Fri Oct 16 03:00:14 MSD 2009 -- 118.168.104.42:25 - Taiwan :: Taipei
Fri Oct 16 03:04:54 MSD 2009 -- 88.224.29.48:23 - Turkey :: Ankara
Fri Oct 16 03:25:31 MSD 2009 -- 78.182.139.237:23 - Turkey :: Istanbul
Fri Oct 16 03:31:03 MSD 2009 -- 189.59.185.127:23 - Brazil :: Belo Horizonte
Fri Oct 16 03:35:45 MSD 2009 -- 88.247.138.109:23 - Turkey :: Ankara
Fri Oct 16 03:44:42 MSD 2009 -- 78.191.145.6:23 - Turkey :: Istanbul
Fri Oct 16 04:13:16 MSD 2009 -- 88.240.103.47:23 - Turkey :: Izmir
Fri Oct 16 04:26:24 MSD 2009 -- 85.105.124.18:23 - Turkey :: Istanbul
Fri Oct 16 04:27:17 MSD 2009 -- 78.177.100.253:23 - Turkey :: Bursa
Fri Oct 16 04:31:01 MSD 2009 -- 189.27.148.161:23 - Brazil :: Pelotas
Fri Oct 16 04:32:50 MSD 2009 -- 189.58.18.180:23 - Brazil :: Curitiba
Fri Oct 16 04:34:06 MSD 2009 -- 189.59.48.225:23 - Brazil :: Cuiaba
Fri Oct 16 04:34:25 MSD 2009 -- 201.206.24.154:23 - Costa Rica :: Cartago
Fri Oct 16 04:36:53 MSD 2009 -- 189.13.140.64:23 - Brazil :: Belo Horizonte
Fri Oct 16 05:13:23 MSD 2009 -- 80.12.137.216:23 - France :: Unknown
Fri Oct 16 05:16:10 MSD 2009 -- 88.250.210.33:23 - Turkey :: Istanbul
Fri Oct 16 05:34:13 MSD 2009 -- 93.178.88.209:23 - Russian Federation :: Rostov-na-donu
Fri Oct 16 05:34:16 MSD 2009 -- 189.59.113.145:23 - Brazil :: Campo Grande
Fri Oct 16 05:37:18 MSD 2009 -- 213.207.216.108:23 - Iran, Islamic Republic of :: Tehran
Fri Oct 16 06:48:37 MSD 2009 -- 201.240.109.193:23 - Peru :: Lima