搜索
查看: 2700|回复: 7
收起左侧

[讨论] 求帮分析路由日志!

 关闭 [复制链接]
sunjushi
发表于 2012-5-11 12:15:53 | 显示全部楼层 |阅读模式
最近有时候总是上网就几KB,然后总感觉像断网的似的,下面是我复制的出问题时候路由的日志,下面这些在1分内就执行了80多次。。

  1. 0 [Fri May 11 11:24:57 2012][FW]Detected Port Scan from 218.78.217.67, drop it  
  2. 1 [Fri May 11 11:24:57 2012][FW]Message repeat 1 times  
  3. 2 [Fri May 11 11:24:57 2012][FW]Detected Port Scan from 122.225.35.104, drop it  
  4. 3 [Fri May 11 11:24:58 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  5. 4 [Fri May 11 11:24:58 2012][FW]Detected Port Scan from 120.209.165.157, drop it  
  6. 5 [Fri May 11 11:25:00 2012][FW]Detected Port Scan from 122.240.237.179, drop it  
  7. 6 [Fri May 11 11:25:05 2012][FW]Message repeat 1 times  
  8. 7 [Fri May 11 11:25:05 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  9. 8 [Fri May 11 11:25:05 2012][FW]Detected Port Scan from 122.240.237.179, drop it  
  10. 9 [Fri May 11 11:25:05 2012][FW]Detected Port Scan from 121.243.185.44, drop it  
  11. 10 [Fri May 11 11:25:06 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  12. 11 [Fri May 11 11:25:07 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  13. 12 [Fri May 11 11:25:07 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  14. 13 [Fri May 11 11:25:08 2012][FW]Detected Port Scan from 60.63.205.254, drop it  
  15. 14 [Fri May 11 11:25:09 2012][FW]Message repeat 1 times  
  16. 15 [Fri May 11 11:25:09 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  17. 16 [Fri May 11 11:25:09 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  18. 17 [Fri May 11 11:25:11 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  19. 18 [Fri May 11 11:25:12 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  20. 19 [Fri May 11 11:25:12 2012][FW]Detected Port Scan from 59.54.255.7, drop it  
  21. 20 [Fri May 11 11:25:12 2012][FW]Detected Port Scan from 122.225.35.104, drop it  
  22. 21 [Fri May 11 11:25:13 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  23. 22 [Fri May 11 11:25:14 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  24. 23 [Fri May 11 11:25:16 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  25. 24 [Fri May 11 11:25:19 2012][FW]Message repeat 1 times  
  26. 25 [Fri May 11 11:25:19 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  27. 26 [Fri May 11 11:25:19 2012][FW]Detected Port Scan from 122.240.237.179, drop it  
  28. 27 [Fri May 11 11:25:20 2012][FW]Detected Port Scan from 116.253.113.144, drop it  
  29. 28 [Fri May 11 11:25:21 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  30. 29 [Fri May 11 11:25:21 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  31. 30 [Fri May 11 11:25:21 2012][FW]Detected Port Scan from 122.240.237.179, drop it  
  32. 31 [Fri May 11 11:25:23 2012][FW]Message repeat 1 times  
  33. 32 [Fri May 11 11:25:23 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  34. 33 [Fri May 11 11:25:23 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  35. 34 [Fri May 11 11:25:25 2012][FW]Detected Port Scan from 1.203.234.100, drop it  
  36. 35 [Fri May 11 11:25:25 2012][FW]Message repeat 1 times  
  37. 36 [Fri May 11 11:25:25 2012][FW]Detected Port Scan from 122.225.35.104, drop it  
  38. 37 [Fri May 11 11:25:25 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  39. 38 [Fri May 11 11:25:26 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  40. 39 [Fri May 11 11:25:27 2012][FW]Detected Port Scan from 122.240.237.179, drop it  
  41. 40 [Fri May 11 11:25:28 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  42. 41 [Fri May 11 11:25:30 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  43. 42 [Fri May 11 11:25:31 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  44. 43 [Fri May 11 11:25:32 2012][FW]Detected Port Scan from 14.120.86.68, drop it  
  45. 44 [Fri May 11 11:25:33 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  46. 45 [Fri May 11 11:25:36 2012][FW]Message repeat 1 times  
  47. 46 [Fri May 11 11:25:36 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
  48. 47 [Fri May 11 11:25:37 2012][FW]Detected Port Scan from 116.233.46.212, drop it  
  49. 48 [Fri May 11 11:25:37 2012][FW]Message repeat 1 times  
  50. 49 [Fri May 11 11:25:37 2012][FW]Detected Port Scan from 183.128.184.46, drop it  
  51. 50 [Fri May 11 11:25:39 2012][FW]Detected Port Scan from 222.215.168.225, drop it  
复制代码

weiwenfeng
发表于 2012-5-12 14:54:33 | 显示全部楼层
这是很正常的路由日志啊。。。如果感觉像断网了,你可以在运行框输入:“ping www.qq.com -t”,看中间是否有丢包,如果连续正常说明并没有断网,如果中间有丢包说明可能确实网络不稳定

评分

参与人数 1经验 +3 收起 理由
染指流年。 + 3 魅力值换领计划已启动,详情附于置顶帖

查看全部评分

nazisoft
发表于 2012-5-12 15:32:02 | 显示全部楼层
端口被扫描
在路由防火墙中设置一下,启用“忽略wan口的ping包”和“禁止外网的主动连接”这两个功能
亿鑫电脑科技
发表于 2012-5-12 19:13:37 | 显示全部楼层
楼主的路由可能被蹭网了,现在又一种蹭网卡就可以达到楼主这种情况
sunjushi
 楼主| 发表于 2012-5-13 01:02:51 | 显示全部楼层
nazisoft 发表于 2012-5-12 15:32
端口被扫描
在路由防火墙中设置一下,启用“忽略wan口的ping包”和“禁止外网的主动连接”这两个功能

嗯,忽略了,倒没有禁止外网的主动连接那个选项。而且刚修改了密码,并把除了我和隔壁的ip剩余的都禁用了。看看日后还是否会有上述现象了
sunjushi
 楼主| 发表于 2012-5-13 01:04:19 | 显示全部楼层
亿鑫电脑科技 发表于 2012-5-12 19:13
楼主的路由可能被蹭网了,现在又一种蹭网卡就可以达到楼主这种情况

谢谢,我现在更改了策略,若日后再出现在说了
sunjushi
 楼主| 发表于 2012-5-13 01:08:53 | 显示全部楼层
weiwenfeng 发表于 2012-5-12 14:54
这是很正常的路由日志啊。。。如果感觉像断网了,你可以在运行框输入:“ping www.qq.com -t”,看中间是否 ...

我测过,测百度丢包都很严重。从这日志上我个人感觉是在短时间内多个ip被扫描,但似乎又不合适,我不知道路由持续执行这个是什么原因?是不是运营商那边或者线路不稳定造成的?
染指流年。
发表于 2012-5-22 13:51:42 | 显示全部楼层
楼主您好,您已多日没有对本求助帖进行关注处理,为提高版面可读性,本帖关闭。

若有其它问题欢迎随时来答疑区发帖询问,最后顺祝您能在答疑区学得多,玩得乐。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-9-22 20:42 , Processed in 0.054228 second(s), 8 queries , MemCache On.

快速回复 返回顶部 返回列表