阡陌暮的部落格

rule 1 deny ip source 124.115.0.0 0.0.255.255 (86771 times matched)

为安全，我也屏蔽了此IP段。

SYN Flood攻击!.IP都不是真实的.我这两天也遇到了!.没办法.只能把124.115.0.0/24网段给封了.不能Web服务一会有Down了

终于把它干掉了。请参见下文。在此声明，大家可以自由拷贝下文，希望大家广为传播，把这段IP地址彻底废掉！让这帮畜生再害人！

http://www.idogicat.com/diary/66.html

我今天发现自己上网很慢，一查服务器才发现这个IP断的变态行为。是在搞不懂他们要干什么。查了一下，结果如下：

inetnum:      124.114.0.0 - 124.115.255.255
netname:      CHINANET-SN
descr:        CHINANET Shanxi(SN) province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       XC9-AP
mnt-by:       APNIC-HM
mnt-routes:   MAINT-CHINANET-SHAANXI
mnt-lower:    MAINT-CHINANET-SHAANXI
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status:       ALLOCATED PORTABLE
changed:      hm-changed@apnic.net 20060331
source:       APNIC

route:        124.114.0.0/15
descr:        From Shanxi(CHINANET-SN) Network of ChinaTelecom
origin:       AS4134
mnt-by:       MAINT-CHINANET
changed:      dingsy@cndata.com 20060707
source:       APNIC

person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

person:       Xianghong Cao
address:      Shanxi provice data communication Bureau
address:      185# zhuque Road
address:      Xi'an city, Shanxi provice 710061
address:      CN
phone:        +8629-523-3633
fax-no:       +8629-522-8093
e-mail:       sxic@public.xa.sn.cn
nic-hdl:      XC9-AP
mnt-by:       MAINT-NULL
changed:      caoxianghong@263.net 19990409
source:       APNIC

不过就那些国内机关的流氓习惯，你发邮件到SPAM举报，估计也是给你回来一封EMAIL，说投递不到。

垃圾IP，封掉他，CPU占用率立即下降。

一个段基本都是，你没看到只是没爬到你那里

。。。。直接说是124.115.0.*多好，你没列出来完，总255个