Húzd ki! Bocs.

2009/01/29 23:08:14 : Blocked access attempt from 91.48.212.233
2009/01/29 23:04:28 : Blocked access attempt from 91.120.30.166
2009/01/29 23:03:18 : Blocked access attempt from 79.121.56.149
2009/01/29 22:59:23 : Blocked access attempt from 186.9.22.215
2009/01/29 22:57:31 : Blocked access attempt from 91.201.116.142
2009/01/29 22:55:59 : Blocked access attempt from 91.120.30.166
2009/01/29 22:55:28 : Blocked access attempt from 200.108.218.194
2009/01/29 22:53:01 : Blocked access attempt from 92.80.104.116
2009/01/29 22:51:13 : Blocked access attempt from 79.121.56.149
2009/01/29 22:46:56 : Blocked access attempt from 68.98.165.113
2009/01/29 22:45:34 : Blocked access attempt from 61.164.112.198
2009/01/29 22:44:47 : Blocked access attempt from 68.98.165.113
2009/01/29 22:43:48 : Blocked access attempt from 91.120.163.62
2009/01/29 22:43:02 : Blocked access attempt from 124.122.160.19
2009/01/29 22:42:57 : Blocked access attempt from 68.98.165.113
2009/01/29 22:41:11 : Blocked access attempt from 74.53.188.135
2009/01/29 22:29:47 : Blocked access attempt from 212.144.111.52
2009/01/29 22:29:38 : Blocked access attempt from 91.120.163.62
2009/01/29 22:29:23 : Blocked access attempt from 78.29.180.2
2009/01/29 22:27:25 : Blocked access attempt from 87.97.3.90
2009/01/29 22:25:44 : Blocked access attempt from 212.144.111.52
2009/01/29 22:25:30 : Blocked access attempt from 87.97.3.90
2009/01/29 22:24:44 : Blocked access attempt from 212.144.111.52
2009/01/29 22:24:40 : Blocked access attempt from 208.158.15.131
2009/01/29 22:24:33 : Blocked access attempt from 91.120.163.62
2009/01/29 22:23:45 : Blocked access attempt from 87.97.3.90

Most adjak 24 órás logot? Ez mindenkivel így van, legfeljebb neked új. Ha amúgy a routered ettől megfekszik cseréld le, frissíts firmware-t, stb. És kis ízelítő az enyémből…

Issued at: Thu Jan 29 23:12:18 2009

— Log Begin —
Thu Jan 29 22:12:28 2009 Unrecognized attempt blocked from 92.241.185.25:235 to 80.99.41.10 TCP:10000
Thu Jan 29 22:13:06 2009 Unrecognized attempt blocked from 142.166.202.82:60728 to 80.99.41.10 TCP:34375
Thu Jan 29 22:13:09 2009 Unrecognized attempt blocked from 142.166.202.82:60728 to 80.99.41.10 TCP:34375
Thu Jan 29 22:13:15 2009 Unrecognized attempt blocked from 142.166.202.82:60728 to 80.99.41.10 TCP:34375
Thu Jan 29 22:15:14 2009 Unrecognized attempt blocked from 142.166.202.82:60858 to 80.99.41.10 UDP:34375
Thu Jan 29 22:17:09 2009 Unrecognized attempt blocked from 142.166.202.82:60954 to 80.99.41.10 UDP:34375
Thu Jan 29 22:17:14 2009 Unrecognized attempt blocked from 142.166.202.82:60967 to 80.99.41.10 TCP:34375
Thu Jan 29 22:17:17 2009 Unrecognized attempt blocked from 142.166.202.82:60967 to 80.99.41.10 TCP:34375
Thu Jan 29 22:17:23 2009 Unrecognized attempt blocked from 142.166.202.82:60967 to 80.99.41.10 TCP:34375
Thu Jan 29 22:17:40 2009 Unrecognized attempt blocked from 142.166.202.82:61013 to 80.99.41.10 TCP:34375
Thu Jan 29 22:17:42 2009 Unrecognized attempt blocked from 142.166.202.82:60954 to 80.99.41.10 UDP:34375
Thu Jan 29 22:17:43 2009 Unrecognized attempt blocked from 142.166.202.82:61013 to 80.99.41.10 TCP:34375
Thu Jan 29 22:17:49 2009 Unrecognized attempt blocked from 142.166.202.82:61013 to 80.99.41.10 TCP:34375
Thu Jan 29 22:19:08 2009 Unrecognized attempt blocked from 142.166.202.82:61074 to 80.99.41.10 UDP:34375
Thu Jan 29 22:23:23 2009 Unrecognized attempt blocked from 90.154.201.218:13924 to 80.99.41.10 UDP:7806
Thu Jan 29 22:43:28 2009 Unrecognized attempt blocked from 90.154.201.218:13924 to 80.99.41.10 UDP:7806
Thu Jan 29 22:47:56 2009 Unrecognized attempt blocked from 60.222.224.132:42712 to 80.99.41.10 UDP:1027
Thu Jan 29 22:47:57 2009 Unrecognized attempt blocked from 85.84.187.174:63717 to 80.99.41.10 UDP:7806
Thu Jan 29 22:51:32 2009 Unrecognized attempt blocked from 202.97.238.230:39205 to 80.99.41.10 UDP:1027
Thu Jan 29 23:03:57 2009 Unrecognized attempt blocked from 90.154.201.218:13924 to 80.99.41.10 UDP:7806
Thu Jan 29 23:09:55 2009 Unrecognized attempt blocked from 61.164.112.202:6000 to 80.99.41.10 TCP:1433
Thu Jan 29 23:12:34 2009 Unrecognized attempt blocked from 60.15.177.168:33402 to 80.99.41.10 UDP:1026
Thu Jan 29 23:15:35 2009 Unrecognized attempt blocked from 202.97.238.231:52969 to 80.99.41.10 UDP:1026
Thu Jan 29 23:23:36 2009 Unrecognized attempt blocked from 90.154.201.218:13924 to 80.99.41.10 UDP:7806
Thu Jan 29 23:42:18 2009 Unrecognized attempt blocked from 202.97.238.237:49717 to 80.99.41.10 UDP:1026
Thu Jan 29 23:54:00 2009 Unrecognized attempt blocked from 194.44.229.2:80 to 80.99.41.10 TCP:28117
Fri Jan 30 00:00:51 2009 Unrecognized attempt blocked from 89.149.236.192:80 to 80.99.41.10 TCP:24707
Fri Jan 30 00:06:53 2009 Unrecognized attempt blocked from 202.97.238.232:57755 to 80.99.41.10 UDP:1027

A routerem logját küldöm a gépemre is. Január 29-én 635 db „Unrecognized attempt blocked” üzenetem volt.
Próbálkoznak… – nem neked szól a „kísérletezgetés”, személy szerint.

Azt sem volna utolsó tudni, milyen routerről van szó.

Amúgy sok ember annak örül, hogy ír egy trójait, létrehoz vele egy zomibi-PC-hálózatot, aztán mindegyik gépről pingel IP-tartomyányokat. Ha „visszaechoz” egy eszköz, már futtatják is a portszkennert rajt, amivel nagyjából ki lehet matekozni, milyen szolgáltatások futnak mögötte. Ha ez megvan, jön a nyers erő módszere, amivel megpróbálnak betörni.

Annyira nem vészes a dolog, a leggagyibb routerek is fel vannak erre készítve. Ha körbenézel a webfelületén a „security” részleg alatt, láthatod, hogy gyárilag be van állítva elég sok védelmi funkció.

A routeredre nem fognak tudni betörni, esetleg ha címfordítást végzel egy belső hálón lévő eszközre, annak a védelmére figyelj oda (itthoni FTP-m folyamatosan piszkálják, de bejönni persze nem tudnak, mert kivágom őket a francba :)).

Olyat esetleg próbálj meg, hogy a routered WAN interfészén tiltsd le az ICMP üzeneteket (ekkor nem fog válaszolni a ping-re). Talán a butább szkriptek egy részét kiszűrheted így.