DDOS - OVH - Wykrycie

[Cad0s 3]

Witam posiadam VPS-SA w OVH. Od kilku dni dostaję informacje o atakach ddos na mój serwer. Ustawiłem fail2ban oraz named w security pojawiły mi sie logi.

14-May-2014 22:59:12.663 client 124.232.142.220#36115: query (cache) 'www.google.it/A/IN' denied
15-May-2014 02:57:54.521 client 74.82.47.12#51466: query (cache) 'dnsscan.shadowserver.org/A/IN' denied
15-May-2014 06:40:21.998 client 124.232.142.220#57309: query (cache) 'www.google.com/A/IN' denied
15-May-2014 18:54:38.780 client 178.32.56.245#40043: query (cache) 'wradish.com/ANY/IN' denied
15-May-2014 20:38:21.865 client 93.180.5.26#33125: query (cache) 'com/ANY/IN' denied
15-May-2014 23:10:43.088 client 124.232.142.220#43485: query (cache) 'www.google.it/A/IN' denied
16-May-2014 03:32:52.333 client 89.248.162.228#59306: query (cache) 'magas.bslrpg.com/ANY/IN' denied
16-May-2014 06:33:40.636 client 74.82.47.28#35840: query (cache) 'dnsscan.shadowserver.org/A/IN' denied
16-May-2014 06:48:43.839 client 124.232.142.220#36160: query (cache) 'www.google.com/A/IN' denied
16-May-2014 10:10:17.307 client 178.32.56.245#60676: query (cache) 'magas.bslrpg.com/ANY/IN' denied
16-May-2014 13:51:47.672 client 85.25.148.5#41874: query (cache) 'hizbullah.me/A/IN' denied
17-May-2014 01:39:24.273 client 124.232.142.220#60640: query (cache) 'www.google.com/A/IN' denied
17-May-2014 02:49:49.063 client 134.147.203.115#11227: query (cache) '1000.be14de5c.dnsr.if-is.net/A/IN' denied
17-May-2014 02:56:53.402 client 93.180.5.26#40820: query (cache) 'com/ANY/IN' denied
17-May-2014 05:04:46.661 client 74.82.47.12#54800: query (cache) 'dnsscan.shadowserver.org/A/IN' denied
17-May-2014 19:45:53.936 client 124.232.142.220#32871: query (cache) 'www.google.it/A/IN' denied

Czy moge jeszcze jakoś zabezpieczyć serwer jakimiś pakietami prócz iptables

 

[bermut 18]

Po przejęciu forum przez nazwa.pl i zmianach w regulaminie zdecydowałem się usunąć wszystkie swoje posty. Cześć.

Edytowano Wrzesień 20, 2017 przez linoskoczek (zobacz historię edycji)