banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register  
[Login] Loginhttp  | https  ]
 
Forum Index Thảo luận bảo mật trợ giúp em bị botnet với ạ  XML
  [Discussion]   trợ giúp em bị botnet với ạ 24/06/2011 21:54:28 (+0700) | #1 | 242036
mrtruong
Member

[Minus]    0    [Plus]
Joined: 12/03/2009 23:47:21
Messages: 3
Offline
[Profile] [PM]
em ở diễn đàn tuổi trẻ thường tín ( tuoitrethuongtin.net)
gần đây bọn em bị botnet nên bị khoá tạm tài khoản

các bác có cách nào giúp em với không ạ, cài firewall.... ( mong nhận được sự hướng dẫn từ các cao thủ )
em xin cảm ơn

và chi tiết file log smilie


201.12.129.59 - tuoitre [24/Jun/2011:20:53:05 +0700] "GET /forum/ HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
202.129.186.37 - tuoitre [24/Jun/2011:20:53:05 +0700] "GET /forum/showthread.php?p=64276 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
94.228.204.2 - tuoitre [24/Jun/2011:20:53:05 +0700] "GET /forum/ HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
41.72.215.158 - tuoitre [24/Jun/2011:20:53:05 +0700] "GET /forum/showthread.php?p=64277 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
189.72.254.212 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/index.php HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
189.26.255.11 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/ HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
118.96.31.67 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
123.242.153.113 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/index.php HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
186.42.185.58 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
218.189.139.52 - tuoitre [24/Jun/2011:20:53:06 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
110.138.249.63 - tuoitre [24/Jun/2011:20:53:07 +0700] "GET /forum/index.php HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
210.212.99.158 - tuoitre [24/Jun/2011:20:53:07 +0700] "GET /forum/index.php HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
118.96.185.98 - tuoitre [24/Jun/2011:20:53:07 +0700] "GET /forum/showthread.php?p=64276 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
41.86.229.79 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/showthread.php?p=64271 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
195.205.9.3 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/showthread.php?p=64277 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
118.96.78.2 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
85.185.228.195 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
66.203.235.192 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/ HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
41.189.36.26 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/showthread.php?p=64266 HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)"
203.120.215.30 - tuoitre [24/Jun/2011:20:53:08 +0700] "GET /forum/index.php HTTP/1.1" 500 296 "http://tuoitrethuongtin.net/forum/showthread.php?p=64266" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)" 
[Up] [Print Copy]
  [Discussion]   trợ giúp em bị botnet với ạ 07/07/2011 23:29:57 (+0700) | #2 | 243027
[Avatar]
chiro8x
Member

[Minus]    0    [Plus]
Joined: 26/09/2010 00:38:37
Messages: 661
Location: /home/chiro8x
Offline
[Profile] [PM] [Yahoo!]
=.=! Vấn đề là bị BOTNET. Mà bị BOTNET là gì smilie ? Tớ nghe người ta bảo bị tấn công từ chối dịch vụ thì nghe rồi còn bị BOTNET như bạn nói thì chưa nghe.
while(1){}
[Up] [Print Copy]
  [Discussion]   trợ giúp em bị botnet với ạ 10/07/2011 20:24:00 (+0700) | #3 | 243210
mapthulu
Member

[Minus]    0    [Plus]
Joined: 10/06/2011 12:16:42
Messages: 28
Offline
[Profile] [PM]
Nếu dùng .htaccess bạn có thể giảm thểu đó

Lọc User-Agent này Media Center PC
[Up] [Print Copy]
  [Discussion]   trợ giúp em bị botnet với ạ 14/07/2011 14:57:40 (+0700) | #4 | 243508
vntravelroute
Member

[Minus]    0    [Plus]
Joined: 06/03/2011 22:16:02
Messages: 1
Offline
[Profile] [PM]
Cái này mới xếp gạch ngồi hóng các bro hiến kế nào
[Up] [Print Copy]
[digg] [delicious] [google] [yahoo] [technorati] [reddit] [stumbleupon]
Go to: 
 Users currently in here 
1 Anonymous

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|