Tema: Re: DDOS
Autorius: Rrr
Data: 2014-03-27 14:38:05
O tu paziurek apaches ar kas ten pas tave sukasi logus. Gal koks php skriptas gudrus guli kurnors.


"mix" <ratatuto@gmail.com> wrote in message news:lguv4k$pps$1@trimpas.omnitel.net...
> Sveiki
> 
> turiu viena zaislini vps su keliais wordpresais ir joomlom.
> Siandien gavau is tiekejo laiska:
> 
> Dear Abuse team:
> 
> We have detected that a considerable amount of users from your network
> might be heavily abusing the service. Perhaps they have been comprised
> and belong to a botnet. We would appreciate if you can take care of this
> issue as soon as possible.
> 
> The abuse comes in the form of DDoS using SYN Flood attack towards port
> 80 of IP 134.90.145.206 and it started at approximately 11:50 CET (+0100).
> 
> The following is a list of IPs that belong to you and generate traffic
> towards this IP.
> 
> === Evidence ===
> Date first seen          Duration  Src AS      Src IP Addr      Dst IP Addr 
> Packets    Bytes      bps    Bpp Flows
> 
> 
> Ant serverio nurodytu metu matau cpu, mysql padidejusia veiksena )
> trafikas akivaizdziai neisauges.
> prasukau chkrootkit, rkhunteri ir clamscana - itartino jie nieko nerado.
> 
> 
> Padekit surast zveri )? 
>