Spoofing Attack

Slash95
(usa CentOS)

Enviado em 02/03/2015 - 21:15h

Olá, é meu primeiro tópico aqui, eu não sei se postei na área correta, caso não for a correta, me desculpe!

Então.. Há muito tempo eu venho sofrendo ataques. O ataque parece que Gera IPs randomicos falsificados. Isto está sobrecarregando meu servidor de SA-MP (San Andreas Multiplayer) e utilizando toda largura de banda.

Estou utilizando CentOs 6.6

Algo como isto:

[13:53:23] Incoming connection: 177.31.174.247:57015

[13:53:23] Incoming connection: 187.98.15.115:42164

[13:53:23] Incoming connection: 187.198.115.48:14645

[13:53:23] Incoming connection: 177.230.20.149:18669

[13:53:23] Incoming connection: 177.229.85.50:54500

[13:53:23] Incoming connection: 187.76.39.150:5948

[13:53:23] Incoming connection: 187.236.117.93:2543

[13:53:23] Incoming connection: 187.183.43.160:43766

[13:53:23] Incoming connection: 177.65.218.50:33889

[13:53:23] Incoming connection: 177.115.208.132:23922

[13:53:23] Incoming connection: 177.222.166.223:47319

[13:53:23] Incoming connection: 187.55.242.245:11732

[13:53:23] Incoming connection: 187.71.232.39:28177

[13:53:23] Incoming connection: 187.63.224.179:4287

[13:53:23] Incoming connection: 187.43.249.78:36142

[13:53:23] Incoming connection: 187.92.155.208:2511

[13:53:23] Incoming connection: 177.219.9.121:1585

[13:53:23] Incoming connection: 177.108.98.61:40727

[13:53:23] Incoming connection: 177.18.121.249:39470

[13:53:23] Incoming connection: 177.170.237.169:21152

[13:53:23] Incoming connection: 187.117.129.161:11374

[13:53:23] Incoming connection: 187.97.146.36:5015

[13:53:23] Incoming connection: 187.180.154.193:20149

[13:53:23] Incoming connection: 177.35.76.33:18230

[13:53:23] Incoming connection: 187.245.206.209:56663

[13:53:23] Incoming connection: 177.106.115.167:26412

[13:53:23] Incoming connection: 187.253.194.151:6851

[13:53:23] Incoming connection: 187.15.246.204:9778

[13:53:23] Incoming connection: 187.159.70.215:25554

[13:53:23] Incoming connection: 177.192.194.205:50528

[13:53:23] Incoming connection: 187.15.14.137:43986

[13:53:23] Incoming connection: 177.75.38.252:6394

[13:53:23] Incoming connection: 177.214.126.8:54979

[13:53:23] Incoming connection: 177.45.106.181:23041

[13:53:23] Incoming connection: 187.253.99.204:16502

[13:53:23] Incoming connection: 177.6.61.174:16290

[13:53:23] Incoming connection: 177.38.47.16:61487

[13:53:23] Incoming connection: 187.84.81.133:27486

[13:53:23] Incoming connection: 187.236.83.224:32944

[13:53:23] Incoming connection: 177.44.65.90:56873

[13:53:23] Incoming connection: 177.180.103.34:60617

[13:53:23] Incoming connection: 187.174.220.25:38698

[13:53:23] Incoming connection: 187.26.119.180:1773 

É sempre a mesma faixa de IPs..

Alguém tem uma solução pra isto? =)

danniel-lara
(usa Fedora)

Enviado em 03/03/2015 - 09:12h

tu podes bloquear via iptables