Last active
June 7, 2017 15:34
-
-
Save andrew-phi/a9352266826b9a187ca74ae34b0f8b5c to your computer and use it in GitHub Desktop.
tcp packet counting
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Статистика пакетов за полтора часа. | |
| Отрезки времени от ~14:05, сбор на каждом следующем сервере в списке запускался через ~5 минут от предыдущего. | |
| запросы к: | |
| 87.240.165.81 | |
| 95.213.11.139 | |
| 95.213.11.150 | |
| На этих серверах был запущен tcpdump (число отфильтрованных пакетов): | |
| bots01 | |
| 31056 | |
| bots02 | |
| 120955 | |
| bots03 | |
| 159388 | |
| bots04 | |
| 415687 | |
| Остальные серверы - через iptables, здесь доступны раздельные числа для разных IP. Смотреть графу pkts. | |
| bots05 | |
| pkts bytes target prot opt in out source destination | |
| 138K 8306K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 131K 7867K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots06 | |
| pkts bytes target prot opt in out source destination | |
| 216 12960 count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 235 14100 count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots07 | |
| pkts bytes target prot opt in out source destination | |
| 205K 12M count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 218K 13M count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots08 | |
| pkts bytes target prot opt in out source destination | |
| 226K 14M count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 219K 13M count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots09 | |
| pkts bytes target prot opt in out source destination | |
| 5624 337K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 5019 301K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots10 | |
| pkts bytes target prot opt in out source destination | |
| 97958 5877K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 95796 5748K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots11 | |
| pkts bytes target prot opt in out source destination | |
| 99064 5944K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 97952 5877K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| bots12 | |
| pkts bytes target prot opt in out source destination | |
| 81190 4871K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 82019 4921K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| fireforks | |
| pkts bytes target prot opt in out source destination | |
| 31214 1873K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 30189 1811K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| proc01 | |
| pkts bytes target prot opt in out source destination | |
| 156K 9370K count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 157K 9432K count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| project-f01.infostars.ru | |
| pkts bytes target prot opt in out source destination | |
| 253K 15M count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 254K 15M count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 | |
| sds-bots-03.pltrm.net | |
| pkts bytes target prot opt in out source destination | |
| 230K 14M count tcp -- * * 0.0.0.0/0 87.240.165.81 tcp flags:0x17/0x02 | |
| 230K 14M count tcp -- * * 0.0.0.0/0 95.213.11.139 tcp flags:0x17/0x02 | |
| 0 0 count tcp -- * * 0.0.0.0/0 95.213.11.150 tcp flags:0x17/0x02 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment