Merhaba arkadaşlar, galiba siteme saldırı yapıyorlar.
WHM Apache Status'ten bakıyorum. Şunları veriyor.
0-0 27570 0/24/24 W 5.27 31 0 0.0 0.26 0.26 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
1-0 27571 0/22/22 W 4.27 1 0 0.0 0.24 0.24 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
2-0 27572 0/21/21 W 4.33 14 0 0.0 0.23 0.23 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
3-0 27573 0/20/20 W 3.54 20 0 0.0 0.19 0.19 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
4-0 27574 0/18/18 W 3.31 13 0 0.0 0.17 0.17 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
5-0 27578 0/22/22 W 4.66 2 0 0.0 0.26 0.26 81.213.179.82 gecegunduz.org GET / HTTP/1.1
6-0 27582 0/15/15 W 3.53 54 0 0.0 0.19 0.19 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
7-0 27583 0/21/21 W 4.13 51 0 0.0 0.33 0.33 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
8-0 27587 0/21/21 W 4.55 15 0 0.0 0.26 0.26 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
9-0 27588 0/24/24 W 4.22 3 0 0.0 0.33 0.33 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
10-0 27589 0/16/16 L 2.94 3 0 0.0 0.21 0.21 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
11-0 27590 0/57/57 W 3.17 19 0 0.0 0.83 0.83 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
12-0 27597 0/25/25 W 4.90 0 0 0.0 0.28 0.28 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
13-0 27598 0/20/20 W 3.42 75 0 0.0 0.24 0.24 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
14-0 27599 0/28/28 W 3.32 1 0 0.0 0.27 0.27 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
15-0 27614 0/19/19 W 3.42 0 0 0.0 0.29 0.29 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
16-0 27615 0/20/20 W 2.51 7 0 0.0 0.17 0.17 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
17-0 27616 0/21/21 W 3.48 14 0 0.0 0.26 0.26 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
18-0 27633 0/8/8 W 1.60 16 0 0.0 0.11 0.11 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
19-0 27634 0/22/22 W 3.20 10 0 0.0 0.19 0.19 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
20-0 27637 0/23/23 W 3.15 24 0 0.0 0.23 0.23 78.172.151.178 aski-memnu.gen.tr POST /ask-i/index.php HTTP/1.0
Herhalde saldırı alıyorum bu işlerden hiç anlamıyorum.
SSH'tan netstat -n çalıştırdığımda;
tcp 0 0 212.68.42.172:80 78.172.151.178:1418 CLOS
Bunun gibi sonuçlar veriyor binlerce.
Savcılığa şikayette bulunacam. Nasıl bir yol izlemeliyim?
