|
Napad na infrastrukturu .RS domena
|
10-11-2022, 01:45 PM
Uzas kakve informacije daju...
Kazu "tehnicki problem" ali videcemo sa korisnicima "koji su pod napadom"  Meni .rs radi OK, ne vidim neke probleme tu. Ne znam da li su stvarno bili pod napadom ili ne... 
Piše lepo: "Zajedno sa pružaocima usluga koji su napadnuti radimo na otklanjanju problema i očekujemo rešenje u najkraćem roku.".
Sad već se polako sve vraća u normalu, a i zavisi koji DNS koristiš, i šta ti je keširano.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
10-11-2022, 02:27 PM
(This post was last modified: 10-11-2022, 02:35 PM by Aleksandar.Dj..)
zanimljivo je da je do sada .rs imao 100% dostupnost
edit: pise u medijima da je ICMP flood u pitanju
10-11-2022, 02:45 PM
Molim te da ostaviš izvor/link za obe objave. Hvala.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
10-11-2022, 02:50 PM
Procitao sam ovo:
Quote:Većina DDoS napada su tzv. napadi na ICMP (ICMP floods), kada velika količina ping zahteva iz više izvora vrši istovremeni napad na jednu metu dok ne dođe do preopterećenja. Ovi napadi se često sprovode uz pomoć botova. ..a sad vidim da su oni to uopsteno pisali o DDoS. Sto se tice dostupnosti: https://www.rnids.rs/publikacije/RNIDSinfo39.pdf Iz 2018. ali mislim da vazi i dosta posle toga.
10-11-2022, 02:58 PM
(This post was last modified: 10-11-2022, 03:03 PM by Aleksandar.Dj..)
Evo malo sam pogledao:
.RS name serveri: rs. 172800 IN NS a.nic.rs. rs. 172800 IN NS b.nic.rs. rs. 172800 IN NS f.nic.rs. rs. 172800 IN NS g.nic.rs. rs. 172800 IN NS h.nic.rs. rs. 172800 IN NS l.nic.rs. "A", "B" i "H" su u Srbiji kod RNIDS-a ("B" je Telekomov "odisej.telekom.rs"). "G" u SOX- u. "F" je u Americi: WoodyNet, Inc. (WOODYN). "L" (194.146.106.114) je cak kod Netnod-a. Nemoguce da su i njega oborili. Sad je pitanje koliko njih je "master"... moguce je da su samo "A" i "B" primarni.
10-12-2022, 09:08 AM
Nisam siguran da je relevanto ali neka ga ovde: https://dev.ddos.watch/country/RS i arhivirano: https://archive.ph/yqRjz.
Flag Type Started Target Events Duration ISP source 11-10-2022 17:06 185.119.89.0/24 1508 4 min - view source 11-10-2022 15:33 185.119.89.0/24 3030 15 min - view source 11-10-2022 7:03 185.119.89.0/24 4682 3 min - view source 11-10-2022 4:40 185.119.89.0/24 31589 1 hour 5 min - view source 11-10-2022 0:04 185.119.89.0/24 22271 2 hours 5 min - view source 10-10-2022 23:43 185.119.90.0/24 13724 15 min United Internet Ltd. view source 10-10-2022 21:19 185.119.90.0/24 2011 5 min United Internet Ltd. view source 10-10-2022 16:47 185.119.89.0/24 64290 4 hours 7 min - view source 10-10-2022 13:43 185.119.89.0/24 19726 1 hour 48 min - view
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
10-12-2022, 09:13 AM
Još jedna poruka, "Anonymous" grupe, a vezana za DDoS i Srbiju, datum Oct 4, 2022: https://twitter.com/YourAnonPanda/status...2370095106.
Arhivirano: https://archive.ph/J0QLJ
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
10-12-2022, 02:33 PM
Zvanično saopštenje RNIDS-a, gde opisuju šta se zapravo desilo (da ne kažem pravdaju): https://www.rnids.rs/lat/novosti/napad-n...nost-dns-a
Arhiviriano: https://archive.ph/b2YQb
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
10-12-2022, 06:47 PM
I evo malo više informacija o tome koliko je koji ASN bio pod napadom: https://radar.cloudflare.com/RS.
Arhivirano: https://archive.ph/KgPc4 Arhiviran Telekom (AS8400): https://archive.ph/jK43K Arhiviran SBB (AS31042): https://archive.ph/eYYSg Arhiviran A1 (AS44143): https://archive.ph/hOePZ
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
|
|
« Next Oldest | Next Newest »
|
