Router是不是受到了攻击？
登录 | 论坛导航 -> 华新鲜事 -> 技术の宅 | 本帖共有 4 楼，分 1 页, 当前显示第 1 页 : 本帖树形列表 : 刷新 : 返回上一页
<<始页　 [1]　 末页>>
作者：小男孩 (等级：7 - 出类拔萃，发帖：1420) 发表：2005-04-07 13:30:44　 楼主　 关注此帖
[登录后回复]
Router是不是受到了攻击？
我现在用的是Starhub的Maxonline2000(就是以前的1500),最近一段时间router纪录里面一直不太正常，我的router的纪录显示如下，而且已经持续了很长的时间了。是不是受到攻击或者骚扰了？
在此之前，因为我们里面的某台电脑中毒了，一直对外发出request,导致我们的流量饱和，局域网瘫痪。后来那台机子就重装了，也就没事了。（其实后来发现另外也中毒了，不过那台机子最近一直没有被允许连接网络。）
现在网络状况没什么异常，很稳定，只不过一直有下面的这个问题，现在我的router的advance firewall protection一直开着。
希望那位大哥给指点迷津，有没有什么危险，如果有，如何解决。
关于这个unrecognized attempt,长期以来一直是从18452端口的，不过今天发现似乎开始变化端口了。。
另外，我用的是SMC的7004 VBR的router.固件已经升级到最新。

Thu Apr 7 00:46:00 2005 Unrecognized attempt blocked from 219.95.228.244:4377 to TCP port 18452
Thu Apr 7 00:46:03 2005 Unrecognized attempt blocked from 219.95.228.244:4377 to TCP port 18452
Thu Apr 7 00:46:09 2005 Unrecognized attempt blocked from 219.95.228.244:4377 to TCP port 18452
Thu Apr 7 00:46:10 2005 Unrecognized attempt blocked from 61.173.41.174:3970 to TCP port 18452
Thu Apr 7 00:46:12 2005 Unrecognized attempt blocked from 61.173.41.174:3970 to TCP port 18452
Thu Apr 7 00:46:18 2005 Unrecognized attempt blocked from 61.173.41.174:3970 to TCP port 18452
Thu Apr 7 00:46:25 2005 Unrecognized attempt blocked from 219.95.228.244:4464 to TCP port 18452
Thu Apr 7 00:46:28 2005 Unrecognized attempt blocked from 219.95.228.244:4464 to TCP port 18452
Thu Apr 7 00:46:34 2005 Unrecognized attempt blocked from 219.95.228.244:4464 to TCP port 18452
Thu Apr 7 00:46:36 2005 Unrecognized attempt blocked from 221.137.179.116:3987 to TCP port 18452
Thu Apr 7 00:46:45 2005 Unrecognized attempt blocked from 221.137.179.116:3987 to TCP port 18452
Thu Apr 7 00:46:53 2005 Unrecognized attempt blocked from 220.135.166.253:3340 to TCP port 18452
Thu Apr 7 00:46:56 2005 Unrecognized attempt blocked from 220.135.166.253:3340 to TCP port 18452
Thu Apr 7 00:47:01 2005 Unrecognized attempt blocked from 221.198.52.51:4054 to TCP port 18452
Thu Apr 7 00:47:02 2005 Unrecognized attempt blocked from 220.135.166.253:3340 to TCP port 18452
Thu Apr 7 00:47:04 2005 Unrecognized attempt blocked from 221.198.52.51:4054 to TCP port 18452
Thu Apr 7 00:47:10 2005 Unrecognized attempt blocked from 221.198.52.51:4054 to TCP port 18452
Thu Apr 7 00:47:18 2005 Unrecognized attempt blocked from 218.165.183.248:3006 to TCP port 18452
Thu Apr 7 00:47:21 2005 Unrecognized attempt blocked from 218.165.183.248:3006 to TCP port 18452
Thu Apr 7 00:47:27 2005 Unrecognized attempt blocked from 218.165.183.248:3006 to TCP port 18452
Thu Apr 7 00:47:42 2005 Unrecognized attempt blocked from 221.137.222.26:3787 to TCP port 18452
Thu Apr 7 00:47:45 2005 Unrecognized attempt blocked from 221.137.222.26:3787 to TCP port 18452
Thu Apr 7 00:47:47 2005 Unrecognized attempt blocked from 210.118.108.254:52891 to TCP port 18452
Thu Apr 7 00:47:50 2005 Unrecognized attempt blocked from 210.118.108.254:52891 to TCP port 18452
Thu Apr 7 00:47:50 2005 Unrecognized attempt blocked from 221.137.222.26:3787 to TCP port 18452
Thu Apr 7 00:47:56 2005 Unrecognized attempt blocked from 210.118.108.254:52891 to TCP port 18452
Thu Apr 7 00:48:23 2005 Unrecognized attempt blocked from 61.229.58.250:2505 to TCP port 18452
Thu Apr 7 00:48:26 2005 Unrecognized attempt blocked from 61.229.58.250:2505 to TCP port 18452
Thu Apr 7 00:48:33 2005 Unrecognized attempt blocked from 61.229.58.250:2505 to TCP port 18452
Thu Apr 7 00:48:33 2005 Unrecognized attempt blocked from 61.159.15.2:1131 to UDP port 1434
Thu Apr 7 01:00:11 2005 DHCP:renew
Thu Apr 7 01:00:11 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 01:12:40 2005 Unrecognized attempt blocked from 59.189.176.5:3782 to TCP port 1433
Thu Apr 7 01:12:43 2005 Unrecognized attempt blocked from 59.189.176.5:3782 to TCP port 1433
Thu Apr 7 01:15:00 2005 Unrecognized attempt blocked from 59.189.176.5:2234 to TCP port 1433
Thu Apr 7 01:15:03 2005 Unrecognized attempt blocked from 59.189.176.5:2234 to TCP port 1433
Thu Apr 7 01:16:05 2005 Unrecognized attempt blocked from 59.189.176.5:1296 to TCP port 1433
Thu Apr 7 01:16:08 2005 Unrecognized attempt blocked from 59.189.176.5:1296 to TCP port 1433
Thu Apr 7 01:24:54 2005 Unrecognized attempt blocked from 59.189.28.152:1967 to TCP port 1433
Thu Apr 7 02:14:20 2005 Unrecognized attempt blocked from 82.50.181.245:3444 to UDP port 1434
Thu Apr 7 02:24:08 2005 Unrecognized attempt blocked from 218.106.116.167:6000 to TCP port 1433
Thu Apr 7 02:38:36 2005 Unrecognized attempt blocked from 62.57.250.124:3957 to TCP port 9898
Thu Apr 7 03:00:12 2005 DHCP:renew
Thu Apr 7 03:00:12 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 03:03:47 2005 Unrecognized attempt blocked from 218.61.32.121:2563 to UDP port 1434
Thu Apr 7 03:24:40 2005 Unrecognized attempt blocked from 202.52.34.44:63525 to TCP port 18452
Thu Apr 7 03:24:40 2005 Unrecognized attempt blocked from 202.52.34.44:63525 to TCP port 18452
Thu Apr 7 05:00:13 2005 DHCP:renew
Thu Apr 7 05:00:13 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 05:50:44 2005 Unrecognized attempt blocked from 59.189.28.152:1699 to TCP port 1433
Thu Apr 7 06:24:06 2005 Unrecognized attempt blocked from 59.189.28.152:2652 to TCP port 1433
Thu Apr 7 06:53:40 2005 Unrecognized attempt blocked from 210.47.37.117:6000 to TCP port 1433
Thu Apr 7 07:00:14 2005 DHCP:renew
Thu Apr 7 07:00:14 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 07:08:12 2005 Unrecognized attempt blocked from 59.189.28.152:3267 to TCP port 1433
Thu Apr 7 07:26:53 2005 Unrecognized attempt blocked from 59.120.6.133:3304 to TCP port 1433
Thu Apr 7 07:26:56 2005 Unrecognized attempt blocked from 59.120.6.133:3304 to TCP port 1433
Thu Apr 7 07:31:23 2005 Unrecognized attempt blocked from 59.189.24.49:4256 to TCP port 1433
Thu Apr 7 07:44:05 2005 Unrecognized attempt blocked from 59.189.24.49:4402 to TCP port 1433
Thu Apr 7 08:34:11 2005 Unrecognized attempt blocked from 59.189.77.180:3986 to TCP port 1433
Thu Apr 7 08:34:14 2005 Unrecognized attempt blocked from 59.189.77.180:3986 to TCP port 1433
Thu Apr 7 09:00:15 2005 DHCP:renew
Thu Apr 7 09:00:15 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 09:23:03 2005 Unrecognized attempt blocked from 211.158.82.229:6000 to TCP port 3389
Thu Apr 7 09:23:33 2005 Unrecognized attempt blocked from 59.189.77.180:4209 to TCP port 1433
Thu Apr 7 09:23:36 2005 Unrecognized attempt blocked from 59.189.77.180:4209 to TCP port 1433
Thu Apr 7 09:34:15 2005 Unrecognized attempt blocked from 59.158.86.165:3947 to TCP port 1025
Thu Apr 7 09:34:18 2005 Unrecognized attempt blocked from 59.158.86.165:3947 to TCP port 1025
Thu Apr 7 09:34:24 2005 Unrecognized attempt blocked from 59.158.86.165:3947 to TCP port 1025
Thu Apr 7 09:52:28 2005 Unrecognized attempt blocked from 59.189.77.180:1472 to TCP port 1433
Thu Apr 7 09:52:30 2005 Unrecognized attempt blocked from 59.189.77.180:1472 to TCP port 1433
Thu Apr 7 10:28:02 2005 Unrecognized attempt blocked from 59.189.53.65:3464 to TCP port 1433
Thu Apr 7 10:47:50 2005 Unrecognized attempt blocked from 59.189.26.10:3562 to TCP port 1433
Thu Apr 7 11:00:16 2005 DHCP:renew
Thu Apr 7 11:00:16 2005 DHCP:ack(DOL=14400,T1=7200,T2=12600)
Thu Apr 7 11:37:27 2005 Unrecognized attempt blocked from 59.189.77.180:2091 to TCP port 1433
Thu Apr 7 11:37:30 2005 Unrecognized attempt blocked from 59.189.77.180:2091 to TCP port 1433
Thu Apr 7 11:48:56 2005 Unrecognized attempt blocked from 61.74.100.47:3652 to TCP port 4899
Thu Apr 7 12:17:59 2005 Unrecognized attempt blocked from 59.189.77.180:2089 to TCP port 1433
Thu Apr 7 12:18:02 2005 Unrecognized attempt blocked from 59.189.77.180:2089 to TCP port 1433
Thu Apr 7 12:32:20 2005 Unrecognized attempt blocked from 59.189.77.180:1546 to TCP port 1433
Thu Apr 7 12:32:22 2005 Unrecognized attempt blocked from 59.189.77.180:1546 to TCP port 1433
Thu Apr 7 12:35:32 2005 Unrecognized attempt blocked from 212.143.118.70:1311 to UDP port 1434
Thu Apr 7 12:59:08 2005 Unrecognized attempt blocked from 59.189.77.180:3277 to TCP port 1433
Thu Apr 7 12:59:11 2005 Unrecognized attempt blocked from 59.189.77.180:3277 to TCP port 1433
|--------- My Blog --------|
Macintosh--Economics--Literature--Graphics
欢迎来到华新中文网，踊跃发帖是支持我们的最好方法!原文 / 传统版 / WAP版只看此人从这里展开收起列表
作者：SmellsLikeTeenSpirit (等级：11 - 出神入化，发帖：6371) 发表：2005-04-07 15:24:19　 2楼
[登录后回复]
port 1433 is for MSSQL Server
looks like someone is probing the Slammer worm?
欢迎来到华新中文网，踊跃发帖是支持我们的最好方法!原文 / 传统版 / WAP版只看此人从这里展开收起列表
作者：小男孩 (等级：7 - 出类拔萃，发帖：1420) 发表：2005-04-08 02:50:52　 3楼
[登录后回复]
在 SmellsLikeTeenSpirit 的大作中提到：
port 1433 is for MSSQL Serverlooks like someone is probing the Slammer worm?
谢谢！
不知道router加了firewall之后，还有没有危险？
欢迎来到华新中文网，踊跃发帖是支持我们的最好方法!原文 / 传统版 / WAP版只看此人从这里展开收起列表
作者：MrDJay (等级：10 - 炉火纯青，发帖：10172) 发表：2005-04-08 09:38:40　 4楼
[登录后回复]
basically, no one will be interested in an individual residence's router ah...
I think 从内部入手调查。
欢迎来到华新中文网，踊跃发帖是支持我们的最好方法!原文 / 传统版 / WAP版只看此人从这里展开收起列表
论坛导航 -> 华新鲜事 -> 技术の宅 | 返回上一页 | 本主题共有 4 篇文章，分 1 页, 当前显示第 1 页 | 回到顶部
<<始页　 [1]　 末页>>

请登录后回复：帐号 　 密码