Загрузка...

Scanners are trying to reach the ubuntu server

Thread in Linux created by projectACI Dec 19, 2025. 220 views

  1. projectACI
    projectACI Topic starter Dec 19, 2025 1 Feb 23, 2023
    Пытаются достучаться сканеры с различных ip на http сервак на нём развернута C2 есть ли варик отсеивать их?

    Code
    2025/12/19 21:11:46 http: TLS handshake error from 192.42.116.216:14595: EOF
    
2025/12/19 21:11:47 http: TLS handshake error from 192.42.116.178:32765: remote error: tls: unknown certificate authority
    
2025/12/19 21:11:48 http: TLS handshake error from 192.42.116.178:36498: remote error: tls: unknown certificate authority
    
2025/12/19 21:11:53 http: TLS handshake error from 192.42.116.216:55111: remote error: tls: unknown certificate authority
    
2025/12/19 21:11:54 http: TLS handshake error from 192.42.116.216:61999: remote error: tls: unknown certificate authority
    
2025/12/19 21:11:57 http: TLS handshake error from 192.42.116.178:62893: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:08 http: TLS handshake error from 192.42.116.185:46436: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:09 http: TLS handshake error from 192.42.116.216:20279: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:31 http: TLS handshake error from 192.42.116.185:17257: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:33 http: TLS handshake error from 192.42.116.185:22883: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:40 http: TLS handshake error from 192.42.116.185:46335: EOF
    
2025/12/19 21:12:55 http: TLS handshake error from 192.42.116.185:36876: remote error: tls: unknown certificate authority
    
2025/12/19 21:12:57 http: TLS handshake error from 192.42.116.185:45394: remote error: tls: unknown certificate authority
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /
    
[WARN] Path '/' not in allowed URIs
    
[ERROR] Rejecting request to path: /
    
2025/12/19 21:13:13 http: TLS handshake error from 192.42.116.185:45245: remote error: tls: unknown certificate authority
    
2025/12/19 21:13:38 http: TLS handshake error from 192.42.116.185:15514: remote error: tls: unknown certificate authority
    
2025/12/19 21:13:45 http: TLS handshake error from 192.42.116.185:40614: remote error: tls: unknown certificate authority
    
2025/12/19 21:13:47 http: TLS handshake error from 192.42.116.185:45460: remote error: tls: unknown certificate authority
    
2025/12/19 21:13:54 http: TLS handshake error from 192.42.116.185:16134: remote error: tls: unknown certificate authority
    
2025/12/19 21:14:02 http: TLS handshake error from 192.42.116.185:44790: remote error: tls: unknown certificate authority
    
2025/12/19 21:14:05 http: TLS handshake error from 192.42.116.185:53563: remote error: tls: unknown certificate authority
    
2025/12/19 21:14:34 http: TLS handshake error from 192.42.116.185:36266: remote error: tls: unknown certificate authority
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /login.asp
    
[WARN] Path '/login.asp' not in allowed URIs
    
[ERROR] Rejecting request to path: /login.asp
    Так-же как я понимаю укр юмора не занимать из одного запроса вытянул пытались такую папку найти только для чего...
    Code
    /leleka_na_dakhu_skhovav_kabluchku_u_kamizelku_shchob_khutko_osvidchytys_khovrashku
     
    Dec 19, 2025
  2. Xsup
    Xsup Dec 19, 2025 https://lolz.live/threads/9477348/ 218 Nov 21, 2025
    У меня бд уже год ****ят( Заебали уже, устал **** чистить от них
     
    Dec 19, 2025
  3. projectACI
    projectACI Topic starter Dec 19, 2025 1 Feb 23, 2023
    Who's liked this post (1)
    avatarDangerMario, udp сканеры и прочие убожества отвалились бот остался спасибо за решение)
    Code
    Final Agent Struct: {Crc: Id:39f0816c Name: SessionKey:[] Listener: Async:false ExternalIP: InternalIP: GmtOffset:0 Sleep:3 Jitter:0 Pid:18172 Tid:2508 Arch:x64 Elevated:true Process:dev.exe Os:1 OsDesc:Windows (x64) Domain: Computer:KOMPUTER Username:raze Impersonated: OemCP:866 ACP:1251 CreateTime:0 LastTick:0 KillDate:0 WorkingTime:0 Tags: Mark: Color: TargetId:}
    
[INFO] Sending response (112 bytes) to agent: df00dea6
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
    
[DEBUG] Configured URIs: [/kh_route_1]
    
[DEBUG] Current path: /kh_route_1
    
[DEBUG] Path matched URI: /kh_route_1
    
[INFO] Processing valid request for path: /kh_route_1 from 11.22.33.44:61419
    
[INFO] Processing data for existing agent: 39f0816c
    
[INFO] Sending empty response to agent: 39f0816c
     
    Dec 19, 2025
Loading...