phpBB Türkiye - phpBB3 Türkçe destek ve geliştirme

İçeriği atla

Sitemiz sadece phpBB 3.0 sürümüne destek vermektedir. Konu açmadan, ileti yazmadan önce lütfen site kuralları sayfamıza göz atınız.

MJ12bot virus ve saldırı botu

MJ12bot virus ve saldırı botu

İleti ALEXIS 23 Şub 2008 22:39

MJ12bot/v1.0.8 kendisi hem virüs hemde saldırı botudur.

MJ12bot virusünü pc nizde Kaspersky ile yarama yaparak Trojan.Win32.Agent.dqy ve Trojan.Win32.Zapchast.dv isimlerinde bulabilirsiniz.Ve kaspersky ile virüsü bilgisayarınızdan silebilirsiniz.
Gelelim saldırı yönüne, yani biz webmasterları ilgilendiren tarafına: MJ12bot Majestic-12 bot isimleri ile web sitenize girmekte ve .htaccess dosyasını kitleyerek siteniz açılmamaktadır.

Çözümü :
Sitenizin robots.txt ye eklerseniz sorununuz kalmaz.

Kod: Tümünü seç
User-agent: MJ12bot
Disallow: /


.htaccess olarak çözümü :

Kod: Tümünü seç
%{HTTP_USER_AGENT} MJ12bot/v1\.0\.8 [NC]
RewriteRule ^.* - [F]


üstteki ve alttaki iki alternatif çözümü var.

Kod: Tümünü seç
RewriteCond %{HTTP_USER_AGENT} ^MJ12bot/v1\.0\.8.*$
RewriteRule .* - [F]



Son çözüm alttaki ipleri banlamak:

Kod: Tümünü seç
81.37.82.92, 88.122.65.77, 82.63.207.5, 91.165.157.212, 70.178.6.68, 200.72.237.62, 90.9.9.108, 82.231.152.113, 77.180.217.25, 74.125.16.1, 88.16.102.193, 87.111.85.192, 79.16.236.166, 87.217.108.16, 82.44.32.35, 81.184.9.107, 82.61.184.189, 68.91.194.183, 89.6.233.45, 88.25.87.196, 78.50.128.207, 219.142.226.145, 82.223.15.92, 80.35.202.236, 84.228.175.218, 87.160.93.171, 86.76.146.110, 172.174.227.13, 89.6.189.183, 190.11.229.73, 217.200.200.56, 74.14.108.205, 85.133.134.173, 85.81.77.80, 86.108.45.238, 90.40.45.171, 80.30.87.19, 151.20.174.145, 151.21.31.245, 151.33.153.238, 151.56.183.163, 151.59.89.86, 151.60.35.217, 163.21.179.1, 168.126.57.169, 189.14.52.25, 189.174.199.121, 190.129.119.140, 190.154.14.219, 190.2.1.41, 190.2.33.121, 190.44.68.192, 190.45.239.7, 190.49.33.56, 194.63.133.37, 195.25.234.136, 195.3.232.177, 196.206.6.133, 196.218.209.34, 196.40.62.172, 200.125.67.16, 200.171.2.60, 200.93.63.137, 200.94.235.104, 201.11.218.26, 201.253.218.237, 201.3.10.170, 201.52.89.227, 201.81.224.153, 206.162.206.171, 212.16.102.56, 212.76.37.138, 212.91.126.194, 213.22.56.31, 213.37.90.220, 213.44.41.128, 217.224.121.117, 217.234.132.250, 220.225.66.162, 24.232.190.34, 41.225.129.87, 62.10.166.54, 62.10.221.71, 62.10.245.17, 62.121.101.246, 62.237.224.118, 62.28.6.19, 62.51.31.78, 69.139.95.84, 71.179.155.203, 77.176.121.242, 78.62.96.230, 79.10.200.71, 79.19.194.228, 79.211.78.157, 79.213.104.9, 79.3.5.138, 79.5.200.86, 79.6.13.154, 79.7.169.36, 80.103.160.182, 80.24.231.173, 80.26.137.201, 80.30.107.138, 80.35.159.212, 81.172.105.222, 81.198.90.90, 81.35.166.218, 81.36.227.143, 81.37.19.33, 81.38.207.73, 81.50.159.211, 82.121.169.73, 82.121.181.171, 82.159.21.166, 82.213.151.55, 82.229.108.69, 82.244.228.224, 82.248.68.104, 82.249.122.209, 82.55.143.237, 83.11.178.49, 83.112.195.165, 83.115.157.45, 83.184.66.179, 83.19.21.202, 83.196.4.16, 83.202.168.54, 83.24.208.180, 83.24.33.67, 83.33.20.53, 83.37.65.37, 83.45.72.220, 83.49.101.30, 83.52.184.251, 83.60.194.171, 84.110.183.10, 84.125.71.4, 84.139.73.46, 84.154.220.108, 84.167.162.252, 84.183.111.217, 84.189.126.209, 84.221.167.207, 84.57.177.229, 84.78.202.2, 84.79.161.173, 84.80.170.43, 84.97.216.246, 85.104.193.145, 85.104.76.112, 85.108.38.171, 85.147.41.2, 85.221.152.203, 85.241.161.219, 85.55.136.109, 85.59.112.171, 85.73.77.49, 86.42.32.12, 87.10.248.5, 87.103.88.3, 87.105.184.56, 87.11.152.203, 87.165.202.176, 87.196.159.200, 87.217.81.243, 87.219.228.36, 87.7.247.166, 87.7.51.164, 87.88.8.20, 87.89.235.24, 87.89.36.131, 88.0.120.245, 88.0.209.252, 88.13.48.129, 88.14.179.151, 88.160.48.74, 88.160.53.22, 88.170.210.215, 88.26.180.252, 88.3.227.84, 89.1.145.29, 89.142.151.176, 89.178.106.33, 89.61.92.246, 90.29.56.222, 90.31.189.190, 90.33.66.64, 90.34.64.134, 90.37.18.87, 90.38.225.7, 90.48.185.242, 90.9.126.226, 91.16.119.70, 91.165.49.245, 91.5.78.108, 92.113.220.25, 121.247.17.61, 217.234.92.70, 151.65.156.210, 201.58.216.91, 212.49.153.97, 86.61.50.244, 88.169.42.1, 77.49.44.159, 213.98.99.124, 82.131.84.110, 89.180.64.112, 217.136.43.182, 85.45.240.177, 89.40.238.166, 90.18.0.194, 190.13.16.235, 216.17.109.121, 190.20.126.172, 200.93.8.248, 74.13.96.34, 79.179.122.222, 79.183.130.71, 80.58.205.55, 81.172.62.140, 83.55.141.211, 85.49.35.15, 85.84.213.86, 85.85.187.84, 82.224.107.155, 62.147.240.7, 172.142.90.144, 151.56.155.74, 86.220.124.147, 89.138.131.210, 89.139.0.136, 79.27.70.117, 89.129.81.184, 86.208.230.194, 80.134.153.231, 82.135.208.21, 87.20.232.74, 193.77.16.231, 58.186.72.112, 72.70.122.125, 83.138.135.50, 83.34.196.242, 87.217.250.149, 87.30.238.169, 88.19.66.250, 89.245.130.166, 89.61.200.128, 89.77.3.36, 99.234.43.247, 82.217.63.27, 61.229.51.140, 89.129.72.80, 90.32.171.221, 89.182.10.173, 82.236.219.104, 88.8.109.30, 88.25.226.148, 174.216.89.68, 87.176.253.75, 87.179.57.206, 85.125.126.58, 88.165.38.150, 82.56.177.152, 84.221.252.170, 83.113.254.151, 217.159.192.57, 71.63.197.49, 189.13.172.97, 84.91.64.232, 201.11.229.86, 220.130.50.195, 85.49.140.58, 88.65.172.127, 189.18.174.93, 216.189.186.10, 82.231.19.23, 189.26.169.192, 190.64.193.250, 200.117.80.123, 212.21.248.92, 75.36.166.91, 77.181.55.11, 79.18.93.163, 79.27.242.171, 80.181.125.64, 81.34.255.221 81.37.145.81, 82.245.44.195, 82.58.109.197, 82.65.36.99, 83.39.89.236, 83.4.0.205, 83.44.33.211, 84.122.240.73, 84.176.108.84, 84.223.185.110, 85.57.205.49, 87.218.61.38, 87.29.228.20, 87.6.202.58, 88.11.236.65, 88.3.232.124, 88.8.81.203, 89.205.11.213, 90.17.113.102, 90.7.143.52, 91.50.255.29, 79.27.4.235, 84.102.210.12, 79.9.206.231, 90.162.16.130, 151.71.191.220, 85.60.39.74, 82.237.69.84, 80.58.205.42, 212.35.95.172, 88.104.228.166, 83.101.4.180, 81.246.105.105, 77.179.75.7, 201.2.235.42, 67.68.148.55, 77.125.7.153, 124.254.174.215, 125.176.37.150, 151.33.212.15, 189.15.100.102, 189.166.229.138, 189.176.84.208, 189.194.130.254, 190.139.84.102, 190.6.195.31, 190.86.1.238, 193.152.161.66, 193.77.184.204, 193.92.131.110, 195.238.170.179, 196.217.83.138, 200.103.139.158, 200.171.3.14, 200.202.212.220, 200.28.178.156, 201.250.108.46, 201.254.70.60, 201.69.32.103, 201.75.200.14, 201.78.249.77, 201.78.44.45, 201.79.231.80, 202.159.224.102, 203.130.102.54, 207.112.75.144, 212.100.250.228, 212.13.64.34, 212.200.113.171, 213.35.240.207, 213.88.187.135, 217.126.8.20, 217.132.195.237, 217.201.98.157, 217.217.37.174, 219.167.76.36, 24.159.6.100, 41.251.77.92, 61.218.133.77, 61.228.190.117, 62.10.56.95, 62.121.98.150, 62.160.127.98, 62.163.47.215, 65.75.109.164, 66.108.114.86, 67.212.9.195, 68.49.247.242, 68.50.73.108, 69.140.227.187, 70.157.67.110, 70.74.212.68, 74.210.19.84, 75.56.196.113, 76.237.201.2, 77.198.16.123, 77.199.254.224, 78.49.37.94, 79.125.178.18, 79.144.67.3, 79.182.189.107, 79.185.99.202, 79.214.63.5, 79.3.30.112, 79.68.36.11, 80.103.139.245, 80.174.13.23, 80.39.233.159, 80.58.205.51, 80.87.83.234, 81.15.225.217, 81.174.7.203, 81.32.130.233, 81.39.118.198, 81.39.237.42, 81.56.111.140, 81.9.168.160, 82.158.133.84, 82.232.103.173, 82.236.48.113, 82.50.30.211, 83.11.55.213, 83.142.122.123, 83.180.154.106, 83.190.186.241, 83.193.233.121, 83.32.126.77, 83.32.72.86, 83.33.241.36, 83.38.107.46, 83.40.195.108, 83.41.118.115, 83.58.177.13, 83.58.43.58, 83.59.175.162, 84.121.97.47, 84.123.138.200, 84.126.198.125, 84.126.48.140, 84.127.202.66, 84.191.228.205, 84.220.255.198, 84.60.178.189, 84.78.163.126, 84.78.237.65, 84.79.131.119, 85.110.103.133, 85.127.102.35, 85.141.194.212, 85.177.37.49, 85.49.166.120, 85.56.130.241, 85.69.117.46, 85.97.110.173, 86.135.194.217, 86.200.108.23, 86.213.136.109, 86.76.79.33, 87.18.30.115, 87.188.205.181, 87.196.138.38, 87.196.81.123, 87.219.118.63, 87.219.173.197, 87.9.132.173, 88.14.164.60, 88.160.35.61, 88.169.42.11, 88.17.53.153, 88.19.54.15, 88.25.229.121, 88.27.131.88, 88.64.37.108, 88.65.93.244, 88.74.125.65, 88.84.13.115, 89.1.136.224, 89.129.61.93, 89.1.81.184, 89.210.121.228, 89.49.1.110, 89.49.62.152, 89.57.54.58, 89.7.176.231, 89.86.129.17, 90.150.209.105, 90.157.199.19, 90.28.40.116, 90.34.205.159, 91.184.77.170, 91.64.50.83, 91.90.209.95, 98.195.168.91, 213.60.48.111, 68.68.35.235, 70.119.72.53, 71.55.157.205, 80.203.87.93, 85.166.132.144, 195.1.25.8, 205.209.170.161, 205.209.170.162, 205.209.170.163, 205.209.170.164, 205.209.170.172, 205.209.170.179, 205.209.170.180, 205.209.170.202, 205.209.170.204, 205.209.170.205, 205.209.170.220, 205.209.170.221, 206.248.85.170, 165.186.249.114, 83.87.25.66, 84.163.61.127, 220.169.10.247, 83.32.223.164, 217.127.128.252, 81.44.38.136, 12.214.244.43, 75.45.236.20, 87.1.179.45, 201.58.124.209, 89.236.194.78, 213.37.178.181, 89.212.62.206, 81.23.119.226.


kaynak: http://www.sistembilgisi.com/webmaster- ... l#more-370
ALEXIS
eklenti yazarı
eklenti yazarı

Kullanıcı avatarı

İleti: 2515
Kayıt: 03 Arl 2006 09:57
Konum: İstanbul
İsim: Sevdin Filiz
HTML: İyi
CSS: İyi
PHP: Orta
phpBB3: İyi
Sürüm: phpBB 3.1.0

  profesyonel phpBB3 çözümleri ve web hizmetleri

Re: MJ12bot virus ve saldırı botu

İleti kerim usta 24 Şub 2008 01:15

IP lerin hepsini birden banlamak mümkün değilmi?Üye olmayınca IP banlanabiliyormu?Selamlar
kerim usta


İleti: 28
Kayıt: 18 May 2007 00:01
İsim: kerim
HTML: Başlangıç
CSS: Başlangıç
PHP: Başlangıç
phpBB3: Başlangıç
Sürüm: Simuzer 3.0.RC7

Re: MJ12bot virus ve saldırı botu

İleti ALEXIS 24 Şub 2008 01:38

Kullanıcı ve gruplar -> Kullanıcı güvenliği -> IP yasakla

Bir veya daha fazla IP yasaklama

Değişik IP adreslerini belirtmekte veya host isimlerinde, her bir IP adresini yeni satıra giriniz. Bir dizi IP adresini belirtmek için, başlangıçta ve bitişte tire (-) ayracını kullanınız. Joker olarak ise “*” karakterini kullanabilirsiniz.
ALEXIS
eklenti yazarı
eklenti yazarı

Kullanıcı avatarı

İleti: 2515
Kayıt: 03 Arl 2006 09:57
Konum: İstanbul
İsim: Sevdin Filiz
HTML: İyi
CSS: İyi
PHP: Orta
phpBB3: İyi
Sürüm: phpBB 3.1.0

Re: MJ12bot virus ve saldırı botu

İleti ufoss 24 Şub 2008 01:56

tesekkurler paylasim icin...

robots.txt cozumu yeterli sanirim?
ufoss


İleti: 24
Kayıt: 17 Ekm 2007 00:52
İsim: ugur
HTML: İyi
CSS: Başlangıç
PHP: Orta
phpBB3: Başlangıç
Sürüm: phpbb3.rc7

Re: MJ12bot virus ve saldırı botu

İleti noteviz 24 Şub 2008 02:21

Kod: Tümünü seç
%{HTTP_USER_AGENT} MJ12bot/v1\.0\.8 [NC]
RewriteRule ^.* - [F]


bu yaziyi .htaccess e nasil ekleyecegiz? ben ekledim ama hata verdi hep... özel notepad ile de yaptim UTF8 olarak, ama oda olmadi...


veya robots.txt ile nasil yapacagiz? o dosya nerde?
noteviz


İleti: 50
Kayıt: 02 Arl 2007 01:49
HTML: İyi
CSS: Başlangıç
PHP: Orta
phpBB3: Orta
Sürüm: phpBB3

Re: MJ12bot virus ve saldırı botu

İleti ysl52 24 Şub 2008 02:40

robots.txt
kök/root dizindedir,
www.seninnsiten.com/robots.txt
yolunda bulunur. Eğer yoksa notepad ile bir tane robot.txt adında dosya oluşturup ftp ile siteye gönderilmeli..
Benzer şekilde, .htaccess dosyası da kök/root dizindedir.
www.seninnsiten.com/.htaccess
ysl52


İleti: 314
Kayıt: 07 Arl 2007 01:07
Konum: İstanbul
HTML: Başlangıç
CSS: Başlangıç
PHP: Başlangıç
phpBB3: Orta
Sürüm: phpBB3.0.2

Re: MJ12bot virus ve saldırı botu

İleti ALEXIS 24 Şub 2008 02:41

rewrite sadece snippet, yani parça, tek başına çalışmaz rewrite kurallarına uymazsan.

örnekler: http://www.javascriptkit.com/howto/htaccess13.shtml

Kod: Tümünü seç
RewriteEngine On
RewriteBase /
%{HTTP_USER_AGENT} MJ12bot/v1\.0\.8 [NC]
RewriteRule ^.* - [F]


robots.txt

http://www.robotstxt.org/
ALEXIS
eklenti yazarı
eklenti yazarı

Kullanıcı avatarı

İleti: 2515
Kayıt: 03 Arl 2006 09:57
Konum: İstanbul
İsim: Sevdin Filiz
HTML: İyi
CSS: İyi
PHP: Orta
phpBB3: İyi
Sürüm: phpBB 3.1.0


phpBB3 Güvenliği


Kimler çevrimiçi

Bu forumu görüntüleyenler: Kayıtlı kullanıcı yok ve 0 misafir