论坛今天下午受到攻击

心想事成 · 发表于 2005-5-2 19:21:23

马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。

您需要登录才可以下载或查看，没有账号？注册

×

NND，树大招风

心想事成 · 发表于 2005-5-2 19:24:25

QUOTE
Connection attempt to UDP 218.108.42.173:49161 from 218.108.248.200:53Connection attempt to TCP 218.108.42.173:445 from 218.108.157.193:4134 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.157.193:4134 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.132:51604Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.132:51604Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.132:51604Connection attempt to TCP 218.108.42.173:445 from 218.108.177.224:2425 flags:0x02Connection attempt to UDP 218.108.42.173:49165 from 218.108.248.200:53Connection attempt to UDP 218.108.42.173:49164 from 218.108.248.200:53Connection attempt to TCP 218.108.42.173:15118 from 84.58.105.32:35139 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.177.224:2425 flags:0x02Connection attempt to TCP 218.108.42.173:15118 from 84.58.105.32:35139 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.177.224:2425 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.155.86:3826 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.155.86:3826 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.135:51911Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.135:51911Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.135:51911Connection attempt to TCP 218.108.42.173:4899 from 218.89.91.199:43357 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.208.132:3271 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.208.132:3271 flags:0x02Connection attempt to TCP 218.108.42.173:1433 from 218.233.51.25:3090 flags:0x02Connection attempt to TCP 218.108.42.173:1433 from 218.233.51.25:3090 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.154.247:2476 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.131:51967Connection attempt to TCP 218.108.42.173:135 from 218.108.154.247:2476 flags:0x02Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.131:51967Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.131:51967Connection attempt to TCP 218.108.42.173:135 from 218.108.105.251:4202 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.105.251:4202 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.183.204:3307 flags:0x02Connection attempt to TCP 218.108.42.173:7594 from 216.66.19.98:80 flags:0x12Connection attempt to TCP 218.108.42.173:135 from 218.108.183.204:3307 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.196.9:2360 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.134:51136Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.134:51136Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.134:51136Connection attempt to TCP 218.108.42.173:445 from 218.108.195.222:2380 flags:0x02Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49154 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.195.222:2380 flags:0x02Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49154 flags:0x02Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49157 flags:0x02Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49157 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.24.184.133:3573 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.24.184.133:3573 flags:0x02Connection attempt to TCP 218.108.42.173:135 from 218.108.196.9:4607 flags:0x02Connection attempt to TCP 218.108.42.173:139 from 218.108.104.118:3799 flags:0x02Connection attempt to TCP 218.108.42.173:139 from 218.108.104.118:3799 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.191.88:1381 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.205.142:2095 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.191.88:1381 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.205.142:2095 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.133:51965Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.133:51965Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.133:51965Connection attempt to TCP 218.108.42.173:445 from 218.108.107.134:4602 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.185.183:1186 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.107.134:4602 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.185.183:1186 flags:0x02Connection attempt to TCP 218.108.42.173:1433 from 218.108.198.94:4541 flags:0x02Connection attempt to TCP 218.108.42.173:1433 from 218.108.198.94:4541 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.197.157:4740 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.144.208:2747 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.197.157:4740 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.144.208:2747 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.132:51605Connection attempt to TCP 218.108.42.173:135 from 218.108.126.140:3198 flags:0x02Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.132:51605Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.132:51605Connection attempt to TCP 218.108.42.173:445 from 218.108.193.27:4281 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.193.27:4281 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.106.60:3020 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.106.60:3020 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.157.222:2045 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.99.243:3538 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.157.222:2045 flags:0x02Connection attempt to TCP 218.108.42.173:445 from 218.108.99.243:3538 flags:0x02Connection attempt to UDP 218.108.42.173:33434 from 199.200.9.135:51912Connection attempt to UDP 218.108.42.173:33435 from 199.200.9.135:51912Connection attempt to TCP 218.108.42.173:445 from 218.108.99.243:3835 flags:0x02Connection attempt to UDP 218.108.42.173:33436 from 199.200.9.135:51912Connection attempt to TCP 218.108.42.173:445 from 218.108.99.243:3835 flags:0x02
查到有美国的IP攻击，会不会是routeros公司的？

macafee · 发表于 2005-5-3 08:12:59

是扫描器,我的MONO LOG里也每天都有几万条这样的记录~~~~~~~不过都被FW挡住,暂时不影响使用!

bow · 发表于 2005-5-3 09:44:09

老大不行端口转向吧。用dns发到其他ip上再转发到论坛上吧。做dns轮询

DreamCat · 发表于 2005-5-3 23:04:02

一看就是伪造的IP，论坛的防火墙。。。。总感觉不是在防火墙后面。是不是论坛主机直接接入INTERNET的？给论坛单独加个防火墙吧。单独的。

jk0wg · 发表于 2005-5-5 01:28:18

在论坛服务器前面做一个透明防火墙..

cloudbaby · 发表于 2005-5-5 09:39:54

同意楼上的建议在论坛服务器前加一个ISA或者透明防火墙就可以拉嘿嘿

soft_route · 发表于 2005-5-5 11:07:18

网络中的病毒作怪也有可能呢，我这边如果将机器直接接互联网，机器上的防火墙就时刻在告警，现在是用宽带路由器在中间挡着。

bysoft · 发表于 2005-5-10 18:17:46

那我，的号51522745！呢。登陆不了。我找了几个邮箱都注册不了。怎么办啊。现在是用的朋友的号！

ycfei · 发表于 2005-5-11 21:52:09

老大发火了..哈哈.第一次见到.老大是个男的.

prouser · 发表于 2005-5-12 23:44:27

我是前几天一直到现在都被DDOS中，很嚣张，明着来。知道他IP了，但在CC上INCOMEING LOCK里禁止了这IP居然没用。。单独在WEB服务器上封了这IP才好了。

hzkane · 发表于 2005-5-15 23:31:25

QUOTE (哈啤猫 @ May 3 2005, 11:04 PM)
一看就是伪造的IP，论坛的防火墙。。。。总感觉不是在防火墙后面。是不是论坛主机直接接入INTERNET的？给论坛单独加个防火墙吧。单独的。
赞同。。

amoyeah · 发表于 2005-12-29 21:38:55

真正的肯定是伪造的IP拉

账号		自动登录	找回密码
密码			注册