0

1,从昨天开始公司的NETGear R8000路由器被Dos攻击
下面是部分日志

[DoS attack: ACK Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:18:06
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:17:50
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:17:28
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:17:19
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:17:02
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [202.104.230.29], Saturday, Jan 14,2017 10:16:55
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [180.153.87.22], Saturday, Jan 14,2017 10:16:32
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [180.153.87.22], Saturday, Jan 14,2017 10:16:02
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [180.153.87.22], Saturday, Jan 14,2017 10:15:19
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [45.63.126.205], Saturday, Jan 14,2017 10:14:09
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [91.221.176.164], Saturday, Jan 14,2017 10:13:42

发现部分网站无法访问,如csdn.ne, cnblogs等,但是百度,腾讯均能访问;
重启路由器后恢复正常,约两个小时候后又出现该情况

求解答

2017-01-14 提问
1 个回答
0

arp mac 绑定试下,或者你直接屏蔽arp 屏蔽ping 。更换网段试下。nat修改下
不知道你用的是网件原生的固件还是openwrt的

撰写答案

推广链接