1   1  /  1  页   跳转页

求助下

收藏
qbsese
头像
初生襁褓狮
  • 帖子:1
  • 注册: 2009-06-12
  • 来自:
发表于： 2009-06-12 16:21 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

求助下

这是宽带SOHO路由器的系统日记，大家帮忙看下，是否受到攻击啥的？网速好像变慢了，如果是，如何解决？


Fri
2 [Fri Jun 12 05:25:04 2009]: dhcpc send out a discover
3 [Fri Jun 12 05:25:06 2009]: Firmware Version: L01t-073
4 [Fri Jun 12 05:25:06 2009]: PPPOE send PADI...
5 [Fri Jun 12 05:25:06 2009]: PPPOE recv PADO
6 [Fri Jun 12 05:25:06 2009]: PPPOE send PADR...
7 [Fri Jun 12 05:25:11 2009]: retry! PPPOE send PADR...
8 [Fri Jun 12 05:25:11 2009]: PPPOE recv PADS
9 [Fri Jun 12 05:25:11 2009]: PPP session is 8987
10 [Fri Jun 12 05:25:11 2009]: PPP is Connecting...
11 [Fri Jun 12 05:25:11 2009]: PPP lcp: up.
12 [Fri Jun 12 05:25:11 2009]: PPP Connection Established.
13 [Fri Jun 12 05:25:11 2009]: PPP ipcp: up.
14 [Fri Jun 12 05:25:11 2009]: local IP address 120:33:188:10
15 [Fri Jun 12 05:25:11 2009]: remote IP address 120:33:188:1
16 [Fri Jun 12 05:25:11 2009]: primary DNS address 218:85:152:99
17 [Fri Jun 12 05:25:11 2009]: secondary DNS address218:85:157:99
18 [Fri Jun 12 12:37:29 2009]: IP 120.33.188.10 Land
19 [Fri Jun 12 12:37:33 2009]: IP 120.33.188.10 Land
20 [Fri Jun 12 12:37:38 2009]: IP 120.33.188.10 Land
21 [Fri Jun 12 13:05:37 2009]: IP 219.128.12.63 Teardrop Attack
22 [Fri Jun 12 13:34:00 2009]: IP 219.128.12.63 Teardrop Attack
23 [Fri Jun 12 13:34:06 2009]: IP 79.146.234.27 Teardrop Attack
24 [Fri Jun 12 13:34:08 2009]: IP 83.38.224.27 Teardrop Attack
25 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
26 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
27 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
28 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
29 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
30 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
31 [Fri Jun 12 14:02:26 2009]: IP 192.168.18.2 TCP SYN Flooding
32 [Fri Jun 12 14:19:10 2009]: IP 219.128.12.63 Teardrop Attack
33 [Fri Jun 12 14:19:13 2009]: IP 84.122.202.137 Teardrop Attack
34 [Fri Jun 12 14:19:15 2009]: IP 82.246.196.122 Teardrop Attack
35 [Fri Jun 12 14:31:30 2009]: IP 129.47.136.141 Teardrop Attack
36 [Fri Jun 12 14:33:21 2009]: IP 125.140.15.9 Teardrop Attack
37 [Fri Jun 12 14:33:24 2009]: IP 84.122.202.137 Teardrop Attack
38 [Fri Jun 12 14:33:25 2009]: IP 79.146.234.27 Teardrop Attack
39 [Fri Jun 12 14:33:26 2009]: IP 219.128.12.63 Teardrop Attack
40 [Fri Jun 12 14:44:10 2009]: IP 192.168.18.2 UDP Flooding
41 [Fri Jun 12 14:44:11 2009]: IP 192.168.18.2 UDP Flooding
42 [Fri Jun 12 14:44:11 2009]: IP 192.168.18.2 UDP Flooding
43 [Fri Jun 12 14:46:53 2009]: IP 219.128.12.63 Teardrop Attack
44 [Fri Jun 12 14:46:55 2009]: IP 125.140.15.9 Teardrop Attack
45 [Fri Jun 12 14:46:58 2009]: IP 192.168.18.2 TCP port scan
46 [Fri Jun 12 14:46:58 2009]: IP 192.168.18.2 TCP port scan
47 [Fri Jun 12 14:46:58 2009]: IP 192.168.18.2 TCP port scan
48 [Fri Jun 12 14:46:58 2009]: IP 192.168.18.2 TCP port scan
49 [Fri Jun 12 14:47:29 2009]: IP 84.122.202.137 Teardrop Attack
50 [Fri Jun 12 14:47:44 2009]: IP 82.246.196.122 Teardrop Attack
51 [Fri Jun 12 15:48:08 2009]: IP 219.128.12.63 Teardrop Attack
52 [Fri Jun 12 15:48:10 2009]: IP 88.176.10.135 Teardrop Attack
53 [Fri Jun 12 15:48:11 2009]: IP 79.146.234.27 Teardrop Attack
54 [Fri Jun 12 15:48:29 2009]: IP 189.60.166.163 Teardrop Attack
55 [Fri Jun 12 15:49:34 2009]: IP 192.168.18.2 TCP SYN Flooding
56 [Fri Jun 12 15:49:34 2009]: IP 192.168.18.2 TCP SYN Flooding
57 [Fri Jun 12 15:49:34 2009]: IP 192.168.18.2 TCP SYN Flooding
58 [Fri Jun 12 15:49:34 2009]: IP 192.168.18.2 TCP SYN Flooding
59 [Fri Jun 12 15:49:34 2009]: IP 192.168.18.2 TCP SYN Flooding
60 [Fri Jun 12 15:49:35 2009]: IP 192.168.18.2 TCP SYN Flooding
61 [Fri Jun 12 15:50:42 2009]: IP 119.99.32.179 Teardrop Attack
62 [Fri Jun 12 15:50:42 2009]: IP 119.99.32.179 Teardrop Attack
63 [Fri Jun 12 15:50:43 2009]: IP 119.99.32.179 Teardrop Attack
64 [Fri Jun 12 15:50:43 2009]: IP 119.99.32.179 Teardrop Attack
65 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
66 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
67 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
68 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
69 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
70 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
71 [Fri Jun 12 15:50:48 2009]: IP 119.99.32.179 Teardrop Attack
72 [Fri Jun 12 15:50:50 2009]: IP 119.99.32.179 Teardrop Attack
73 [Fri Jun 12 15:50:50 2009]: IP 119.99.32.179 Teardrop Attack
74 [Fri Jun 12 15:51:00 2009]: IP 119.99.32.179 Teardrop Attack
75 [Fri Jun 12 15:51:00 2009]: IP 119.99.32.179 Teardrop Attack
76 [Fri Jun 12 15:51:00 2009]: IP 119.99.32.179 Teardrop Attack
77 [Fri Jun 12 15:51:27 2009]: IP 119.99.32.179 Teardrop Attack
78 [Fri Jun 12 15:51:41 2009]: IP 119.99.32.179 Teardrop Attack
79 [Fri Jun 12 16:02:17 2009]: IP 219.128.12.63 Teardrop Attack
80 [Fri Jun 12 16:02:19 2009]: IP 88.176.10.135 Teardrop Attack
81 [Fri Jun 12 16:10:42 2009]: IP 192.168.18.2 TCP SYN Flooding
82 [Fri Jun 12 16:13:13 2009]: IP 192.168.18.2 TCP SYN Flooding
83 [Fri Jun 12 16:13:16 2009]: IP 192.168.18.2 TCP SYN Flooding
84 [Fri Jun 12 16:16:38 2009]: IP 219.128.12.63 Teardrop Attack
85 [Fri Jun 12 16:16:42 2009]: IP 88.176.10.135 Teardrop Attack
86 [Fri Jun 12 16:16:53 2009]: IP 192.168.18.2 TCP port scan
87 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
88 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
89 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
90 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
91 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
92 [Fri Jun 12 16:16:55 2009]: IP 192.168.18.2 TCP port scan
93 [Fri Jun 12 16:17:01 2009]: IP 125.140.15.9 Teardrop Attack
94 [Fri Jun 12 16:18:57 2009]: IP 192.168.18.2 TCP port scan
95 [Fri Jun 12 16:23:49 2009]: IP 192.168.18.2 TCP SYN Flooding
96 [Fri Jun 12 16:24:15 2009]: IP 192.168.18.2 TCP port scan
97 [Fri Jun 12 16:24:15 2009]: IP 192.168.18.2 TCP port scan


用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; CIBA; MAXTHON 2.0)
最后编辑qbsese 最后编辑于 2009-06-12 16:27:53
分享到：
gototop
 
xuminV
头像
自信弱冠狮
  • 帖子:326
  • 注册: 2009-06-11
  • 来自:
发表于： 2009-06-12 22:23 | 短消息 资料
字号： 小 中 大 2楼

回复：求助下

是端口的攻击吧，建议安装瑞星防火墙并制定详细的规则。
共同交流，共同进步。
gototop
 
soaika
头像
叱咤花甲狮
  • 帖子:6048
  • 注册: 2008-09-18
  • 来自:赛亚星球
幸运草09欢乐圣诞
发表于： 2009-06-13 08:17 | 短消息 资料
字号： 小 中 大 3楼

回复：求助下

装个防火墙试试~
您好，您所拨打的用户已关机，请稍后再拨,如要留言请回复1，如要求视频请回复2，如闲得蛋疼请回复3后就近联系当地医院预约割蛋手术，尿频尿急请直接上厕所并服用三金片
gototop
 
studythem
头像
自信弱冠狮
  • 帖子:347
  • 注册: 2009-06-14
  • 来自:广东广州
发表于： 2009-06-15 12:41 | 短消息 资料
字号： 小 中 大 4楼

回复：求助下

你用ethereal抓一下局域网里的数据包，这样比较容易看出问题
好好学习，天天向上！
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT