jdamian

Witam, Od piątku jeden z moich serwerów jest atakowany z internetu. W sobotę jedno z ip zostało zablokowane przez hetznera a dziś już cała sieć. Serwery mam u nich od ponad 3 lat i nigdy nie miałem takiej sytuacji. Wysłałem już do nich 3 maile jednak bez odpowiedzi, co również jest dziwne. Czy mieliście już takie sytuacje? Czy mogę coś zrobić by blokować takie ataki? Czy hetzner postępuje w porządku rozwiązując problem odcinając całą sieć na swoim routerze brzegowym? Pozdrawiam Damian Dear Sir or Madam We regret to inform you that your server with the IP address mentioned in the above subject line has been the target of an attack from the Internet. As a result this has placed a considerable strain on network resources and consequently a segment of our network has been very adversely affected. Your server has therefore been deactivated as a precautionary measure. A corresponding traffic protocol is attached for your information. Guidelines regarding further course of action may be found at http://wiki.hetzner.de/index.php/Leitfaden_bei_Serversperrung/en. For queries and enquiries regarding activation, please open a Support Ticket via your administration interface https://robot.your-server.de/ under menu item Support; Requests. Yours faithfully Your Hetzner Support Team Hetzner Online AG Technical Support Tel: 0911 234226-950 Fax: 0911 234226-928 support@hetzner.de http://www.hetzner.com Registration Office Ansbach, HRB 3204 Management Board: Dipl. Ing. (FH) Martin Hetzner Supervisory Board Chairwoman: Diana Rothhan 15:20:15.238853 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.240084 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.241314 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.242544 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.243880 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.82.245.70.33475 > xx.xx.xx.6.20: UDP, length 8192 15:20:15.245111 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.247541 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.249971 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154.36591 > xx.xx.xx.6.33500: UDP, length 7656 15:20:15.251295 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.254052 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 201.20.37.188.53523 > xx.xx.xx.6.113: UDP, length 8192 15:20:15.258164 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.259396 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.260921 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.262723 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.263954 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 69.175.58.130.39947 > xx.xx.xx.6.33511: UDP, length 8192 15:20:15.265568 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.267098 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.268396 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.269083 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 201.20.37.188 > xx.xx.xx.6: udp 15:20:15.270313 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.271543 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162.34174 > xx.xx.xx.6.33446: UDP, length 8192 15:20:15.272773 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.274407 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.275639 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.276869 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162.34174 > xx.xx.xx.6.33446: UDP, length 8192 15:20:15.285542 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.287677 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.288908 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.290138 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.291369 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.292599 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.294042 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.295273 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.295959 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 94.229.73.154 > xx.xx.xx.6: udp 15:20:15.297352 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162.45093 > xx.xx.xx.6.33451: UDP, length 8192 15:20:15.301916 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.303486 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.304716 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.305947 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174.56531 > xx.xx.xx.6.33440: UDP, length 7656 15:20:15.307177 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.313778 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.315007 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.316238 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.317468 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.319928 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.321159 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162.55275 > xx.xx.xx.6.33505: UDP, length 8192 15:20:15.322495 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.323727 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.331419 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.332650 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.333448 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.334679 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.335909 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84.39753 > xx.xx.xx.6.33456: UDP, length 7656 15:20:15.337139 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.340782 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.341470 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.342772 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.344002 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.345471 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218.47092 > xx.xx.xx.6.33506: UDP, length 8192 15:20:15.347931 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.349234 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.350464 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.353208 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218.59540 > xx.xx.xx.6.33485: UDP, length 7656 15:20:15.357137 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84.43068 > xx.xx.xx.6.33487: UDP, length 7656 15:20:15.358848 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218.37766 > xx.xx.xx.6.33461: UDP, length 8192 15:20:15.360245 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.362642 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.364552 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.366785 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 298: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.369365 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.370596 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 184.154.12.162 > xx.xx.xx.6: udp 15:20:15.371826 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.373056 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.374287 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.375041 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.376271 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84.24583 > xx.xx.xx.6.33501: UDP, length 8192 15:20:15.377501 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.378799 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 50.61.247.84 > xx.xx.xx.6: udp 15:20:15.381782 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.382469 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 834: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.383767 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.385164 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.386395 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.391461 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.392692 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.395122 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174 > xx.xx.xx.6: udp 15:20:15.396711 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 69.175.58.130 > xx.xx.xx.6: udp 15:20:15.398095 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 69.175.58.130 > xx.xx.xx.6: udp 15:20:15.399325 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp 15:20:15.400706 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 209.217.226.174.54062 > xx.xx.xx.6.33497: UDP, length 8192 15:20:15.402004 00:26:88:75:ed:96 > 00:0c:29:46:d4:be, ethertype IPv4 (0x0800), length 1514: 173.231.1.218 > xx.xx.xx.6: udp

@marcinsvr: to w przypadku kiedy Twój serwer dokonuje ataków. Tutaj mamy do czynienia z ataiem z zewnątrz. Dziś rano napisałem kolejnego maila i tym razem w 5 minut sieć została włączona. Jak widać w weekend nie było nikogo kompetentnego:/ Pytanie tylko co dalej... bo sytuacja pewnie się powtórzy.

Ogólnie serwerownie są bardzo dalekie od blokowania czegoś z automatu, ...oprócz własnych klientów no cóż, pora zmienić serwerownię Mógłby mi ktoś doradzić czy taki wpis, mógłby zapobiec atakom podobnym do powyższych? router: vyatta z drop default

Dokładnie o to poprosiłem. Hetzner milczy od piątku. Skoro wiedzą o tym, że jest to atak to czy nie powinni automatycznie blokować te ip? Jedyne co od nich otrzymałem to 3 podobne maile (z automatu):