IP z których atakowano Joomle

[Jacekalex]

W dzisiejszych czasach hakerzy używają różnych trików.
Jednym z nich jest projekt tor:
http://www.torproject.org/index.html.pl

Dlatego zamiast zabawy w kotka i myszkę - lepiej kopnąć w DOOPĘ administratorów - żeby porządnie zabezpieczyli serwery.
Kombinacja modułów (do Apacha): mod-security, mod-evasive, mod-rewrite, i apparmor daje bardzo porządne zabezpieczenie - jeśli tylko te moduły są odpowiednio skonfigurowane.
Dla przykładu: trochę czasu z życia firewall'a na zwykłym desktopie:
Time:Nov 5 00:38:59 Direction: Unknown In:eth0 Out: Port:43125 Source:207.234.145.106 Length:114 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 00:40:40 Direction: Unknown In:eth0 Out: Port:1026 Source:82.166.13.107 Length:423 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 00:40:40 Direction: Unknown In:eth0 Out: Port:1027 Source:82.166.13.107 Length:423 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 00:40:46 Direction: Unknown In:eth0 Out: Port:139 Source:83.230.27.92 Length:48 TOS:0x00 Protocol:TCP Service:Samba (SMB)
Time:Nov 5 00:40:59 Direction: Unknown In:eth0 Out: Port:43125 Source:207.234.145.106 Length:114 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 00:41:09 Direction: Unknown In:eth0 Out: Port:5800 Source:83.230.1.188 Length:48 TOS:0x00 Protocol:TCP Service:VNC
Time:Nov 5 00:41:13 Direction: Unknown In:eth0 Out: Port:1433 Source:83.230.1.188 Length:48 TOS:0x00 Protocol:TCP Service:Ms-sql-s
Time:Nov 5 00:41:17 Direction: Unknown In:eth0 Out: Port:1026 Source:155.88.124.188 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 00:56:13 Direction: Unknown In:eth0 Out: Port:139 Source:83.230.27.92 Length:48 TOS:0x00 Protocol:TCP Service:Samba (SMB)
Time:Nov 5 00:57:15 Direction: Unknown In:eth0 Out: Port:2967 Source:83.86.214.54 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 00:58:45 Direction: Unknown In:eth0 Out: Port:1026 Source:140.148.77.118 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 01:08:17 Direction: Unknown In:eth0 Out: Port:1026 Source:150.254.23.185 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 01:08:19 Direction: Unknown In:eth0 Out: Port:1026 Source:123.67.65.232 Length:376 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 01:34:36 Direction: Unknown In:eth0 Out: Port: Source:220.210.127.115 Length:61 TOS:0x00 Protocol:ICMP Service:Unknown
Time:Nov 5 01:36:09 Direction: Unknown In:eth0 Out: Port:1433 Source:83.230.24.221 Length:48 TOS:0x00 Protocol:TCP Service:Ms-sql-s
Time:Nov 5 01:43:36 Direction: Unknown In:eth0 Out: Port:15814 Source:24.5.98.77 Length:54 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 01:46:15 Direction: Unknown In:eth0 Out: Port:15814 Source:83.22.4.155 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 01:46:15 Direction: Unknown In:eth0 Out: Port:15814 Source:83.22.4.155 Length:47 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 01:46:18 Direction: Unknown In:eth0 Out: Port:15814 Source:83.22.4.155 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 02:02:53 Direction: Unknown In:eth0 Out: Port:34102 Source:83.230.27.201 Length:319 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 02:02:53 Direction: Unknown In:eth0 Out: Port:34102 Source:83.230.27.247 Length:343 TOS:0x10 Protocol:UDP Service:Unknown
Time:Nov 5 02:03:28 Direction: Unknown In:eth0 Out: Port:15814 Source:220.208.6.211 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 02:03:28 Direction: Unknown In:eth0 Out: Port:15814 Source:220.208.6.211 Length:48 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 02:03:31 Direction: Unknown In:eth0 Out: Port:15814 Source:220.208.6.211 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 02:23:53 Direction: Unknown In:eth0 Out: Port:1026 Source:141.166.224.155 Length:376 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 02:52:15 Direction: Unknown In:eth0 Out: Port:1026 Source:165.133.199.77 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 03:01:39 Direction: Unknown In:eth0 Out: Port:1026 Source:20.139.146.36 Length:376 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 03:06:38 Direction: Unknown In:eth0 Out: Port:48375 Source:207.234.145.106 Length:626 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 03:19:11 Direction: Unknown In:eth0 Out: Port:1026 Source:116.230.210.84 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 03:19:43 Direction: Unknown In:eth0 Out: Port:48375 Source:207.234.145.106 Length:626 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 03:46:06 Direction: Unknown In:eth0 Out: Port:1026 Source:124.157.214.97 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 03:48:28 Direction: Unknown In:eth0 Out: Port:25 Source:210.75.205.248 Length:44 TOS:0x00 Protocol:TCP Service:SMTP
Time:Nov 5 04:04:02 Direction: Unknown In:eth0 Out: Port:15814 Source:151.47.69.158 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 04:04:02 Direction: Unknown In:eth0 Out: Port:15814 Source:151.47.69.158 Length:47 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 04:04:05 Direction: Unknown In:eth0 Out: Port:15814 Source:151.47.69.158 Length:48 TOS:0x00 Protocol:TCP Service:Unknown
Time:Nov 5 04:09:22 Direction: Unknown In:eth0 Out: Port:1026 Source:82.166.13.107 Length:423 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 04:16:43 Direction: Unknown In:eth0 Out: Port:1080 Source:24.86.99.101 Length:52 TOS:0x00 Protocol:TCP Service:Socks
Time:Nov 5 04:17:14 Direction: Unknown In:eth0 Out: Port:1026 Source:69.151.57.174 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 04:28:52 Direction: Unknown In:eth0 Out: Port: Source:189.128.57.242 Length:61 TOS:0x00 Protocol:ICMP Service:Unknown
Time:Nov 5 04:34:29 Direction: Unknown In:eth0 Out: Port:445 Source:83.230.27.92 Length:48 TOS:0x00 Protocol:TCP Service:Microsoft-ds
Time:Nov 5 04:39:58 Direction: Unknown In:eth0 Out: Port:1026 Source:89.1.41.135 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 04:55:27 Direction: Unknown In:eth0 Out: Port:1027 Source:82.166.13.107 Length:423 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 05:05:05 Direction: Unknown In:eth0 Out: Port:1026 Source:131.58.145.158 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 05:29:53 Direction: Unknown In:eth0 Out: Port:135 Source:83.230.27.92 Length:48 TOS:0x00 Protocol:TCP Service COM-scm
Time:Nov 5 05:32:28 Direction: Unknown In:eth0 Out: Port:1026 Source:16.92.146.143 Length:389 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 05:32:44 Direction: Unknown In:eth0 Out: Port:1026 Source:85.246.228.69 Length:376 TOS:0x00 Protocol:UDP Service:Unknown
Time:Nov 5 05:38:17 Direction: Unknown In:eth0 Out: Port:135 Source:83.230.27.92 Length:48 TOS:0x00 Protocol:TCP ServiceCOM-scm

Dodatkowo - zainteresuj się (i administratora hostingu) programem snort, snortsam, i innymi programami IDS.