Project translated automatically. Log in or register, to view the original Good day . I came to a complaint from the company where I remove the server, that supposedly my silver ddosit who it is. I understand that I couldn’t put the latest version of WP everywhere – and that’s why this problem arose. I have 10 sites on the server (all on wp+laravel) The server is on i7.ru. In general, I need - to deal with this problem + your recommendations can remove the server from others! ------- The initial message ------- The Brute Force Attack from Your Network Date: 2020-08-17 11:50 Good Morning , We detected a DOS attack from your network. Below the logs. • • • • • • • • • • Please take action as soon as possible. The destination IP of the attack from your network is: cpanel3.vhosting-it.com

Proposals 2 Withdrawn 1 Rejected 2 Discussions 6

Artem M.

256 0

Projects 249
Rating -
Rating 4 057

Budget: 700 UAH Deadline: 1 day

Hello to you.
Prepared to implement immediately after approval of the project.

I have been working with Linux for more than 7 years.

Yurii Besaraba

Winning proposal

15 0

Projects 12
Rating -
Rating 216

Budget: 500 UAH Deadline: 1 day

Hello to you.
Ready to help solve the problem, call me.
There is experience.

Sergey Yashin

23 0

Projects 23
Rating -
Rating 426

Budget: 25000 UAH Deadline: 2 days

I'm ready to start immediately, I'll find and dismantle immediately.I can take on complete service for a supplementary payment.

Pavlo Yatkevich 17 August 2020

логи выложите

Aleksandr Bilnezeryan

17 August 2020

78.24.222.187 - - [16/Aug/2020:20:45:55 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 7964 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:20:45:55 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 8387 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:20:45:56 +0200] ''POST /xmlrpc.php
HTTP/1.1'' 404 55457 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
rv:62.0) Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:22:36:15 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1194 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:22:36:16 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 1576 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:22:36:16 +0200] ''POST /xmlrpc.php
HTTP/1.1'' 404 4830 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:02:17:36 +0200] ''GET /wp-login.php
HTTP/1.1'' 302 - ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:20:34:23 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1915 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:20:34:24 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 2038 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [16/Aug/2020:20:34:24 +0200] ''POST /xmlrpc.php
HTTP/1.1'' 404 13879 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
rv:62.0) Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:20 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1366 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:20 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 1735 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:21 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1366 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:21 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 1742 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:21 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1366 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:22 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 1752 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:04:38:22 +0200] ''POST /xmlrpc.php
HTTP/1.1'' 404 32470 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
rv:62.0) Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:02:53:53 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 7205 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:29 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 5981 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:29 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 6282 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:30 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 6099 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:30 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 6285 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:30 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 6099 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:31 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 6289 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:31 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 6099 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:31 +0200] ''POST /wp-login.php
HTTP/1.1'' 200 6285 ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:31 +0200] ''POST /xmlrpc.php
HTTP/1.1'' 301 - ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:05:45:32 +0200] ''GET /xmlrpc.php
HTTP/1.1'' 404 37771 ''http://neuronews24.it/xmlrpc.php'' ''Mozilla/5.0
(X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:01:21:49 +0200] ''GET /wp-login.php
HTTP/1.1'' 302 - ''-'' ''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0)
Gecko/20100101 Firefox/62.0''
78.24.222.187 - - [17/Aug/2020:01:21:50 +0200] ''GET /wp-login.php
HTTP/1.1'' 200 1996 ''http://warriorrunitalia.com/wp-login.php''
''Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101
Firefox/62.0''

Pavlo Yatkevich 17 August 2020

а можно в нормальном виде?

Aleksandr Bilnezeryan

17 August 2020

в таком виде мне их прислали сапорты сервера

Pavlo Yatkevich 17 August 2020

напишите им пусть пришлбт полные логи, а не куски вырезок из них

Yurii Besaraba 17 August 2020

Ничего не нужно писать, и так все понятно.
ТС - уже решал подобные задачи, обращайтесь.

Add Comment

Aleksandr Bilnezeryan
Ukraine

Projects 104
Rating -
Rating 1 175

Check and clean the server.

Client's review of cooperation with Yurii Besaraba

Check and clean the server.

5.0

Aleksandr Bilnezeryan

Freelancer's review of cooperation with Aleksandr Bilnezeryan

Check and clean the server.

5.0

Yurii Besaraba

Artem M.

Yurii Besaraba

Proposals are currently absent

Proposals concealed

Sergey Yashin

Proposals concealed