被連續攻擊好幾個星期了！DDOS攻擊？我只是市井小民耶！

augesth
個人積分：514分
文章編號：6080106

514分

樓主

2008-05-10 21:31

2008/05/10 20:38:51 : Blocked access attempt : TCP from 61.229.229.162:4353 to 219.84.31.245:17777
2008/05/10 20:39:12 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:39:37 : Blocked access attempt : UDP from 211.124.37.170:19198 to 219.84.31.245:17777
2008/05/10 20:39:49 : Blocked access attempt : UDP from 83.50.4.103:48001 to 219.84.31.245:17777
2008/05/10 20:40:05 : Blocked access attempt : TCP from 61.229.229.162:4446 to 219.84.31.245:17777
2008/05/10 20:40:11 : Blocked access attempt : UDP from 124.120.76.33:13096 to 219.84.31.245:17777
2008/05/10 20:40:14 : Blocked access attempt : TCP from 61.229.229.162:4446 to 219.84.31.245:17777
2008/05/10 20:40:21 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:40:58 : Blocked access attempt : TCP from 61.229.229.162:4517 to 219.84.31.245:17777
2008/05/10 20:41:18 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:41:22 : Blocked access attempt : UDP from 89.156.188.146:15146 to 219.84.31.245:17777
2008/05/10 20:41:47 : Blocked access attempt : UDP from 60.242.234.77:60000 to 219.84.31.245:17777
2008/05/10 20:41:55 : Blocked access attempt : TCP from 61.229.229.162:4588 to 219.84.31.245:17777
2008/05/10 20:42:07 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:42:12 : Blocked access attempt : UDP from 217.42.132.195:9418 to 219.84.31.245:17777
2008/05/10 20:42:49 : Blocked access attempt : TCP from 61.229.229.162:4687 to 219.84.31.245:17777
2008/05/10 20:42:58 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:42:59 : Blocked access attempt : UDP from 59.63.157.142:1341 to 219.84.31.245:1434
2008/05/10 20:43:43 : Blocked access attempt : UDP from 79.186.144.160:23028 to 219.84.31.245:17777
2008/05/10 20:43:45 : Blocked access attempt : TCP from 61.229.229.162:4765 to 219.84.31.245:17777
2008/05/10 20:43:52 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:43:54 : Blocked access attempt : TCP from 61.229.229.162:4765 to 219.84.31.245:17777
2008/05/10 20:44:49 : Blocked access attempt : UDP from 83.44.166.117:10890 to 219.84.31.245:17777
2008/05/10 20:44:50 : Blocked access attempt : TCP from 61.229.229.162:4859 to 219.84.31.245:17777
2008/05/10 20:45:56 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 20:46:35 : Blocked access attempt : TCP from 61.229.229.162:1087 to 219.84.31.245:17777
2008/05/10 20:47:02 : Blocked access attempt : UDP from 221.208.208.90:60124 to 219.84.31.245:1026
2008/05/10 20:47:21 : Blocked access attempt : UDP from 83.5.208.62:18576 to 219.84.31.245:17777
2008/05/10 20:47:29 : Blocked access attempt : TCP from 61.229.229.162:1155 to 219.84.31.245:17777
2008/05/10 20:48:16 : Blocked access attempt : TCP from 222.77.0.136:19616 to 219.84.31.245:22
2008/05/10 20:48:28 : Blocked access attempt : TCP from 61.229.229.162:1234 to 219.84.31.245:17777
2008/05/10 20:49:19 : Blocked access attempt : TCP from 69.60.7.210:80 to 219.84.31.245:2048
2008/05/10 20:49:20 : Blocked access attempt : UDP from 82.10.200.221:10371 to 219.84.31.245:17777
2008/05/10 20:49:23 : Blocked access attempt : TCP from 61.229.229.162:1308 to 219.84.31.245:17777
2008/05/10 20:49:31 : Blocked access attempt : TCP from 69.60.7.199:80 to 219.84.31.245:2081
2008/05/10 20:49:32 : Blocked access attempt : TCP from 61.229.229.162:1308 to 219.84.31.245:17777
2008/05/10 20:49:56 : Blocked access attempt : UDP from 117.193.160.73:10078 to 219.84.31.245:17777
2008/05/10 20:49:58 : Blocked access attempt : UDP from 189.23.50.230:8745 to 219.84.31.245:17777
2008/05/10 20:50:18 : Blocked access attempt : TCP from 61.229.229.162:1381 to 219.84.31.245:17777
2008/05/10 20:50:23 : Blocked access attempt : UDP from 60.50.154.135:16001 to 219.84.31.245:17777
2008/05/10 20:50:27 : Blocked access attempt : TCP from 61.229.229.162:1381 to 219.84.31.245:17777
2008/05/10 20:50:37 : Blocked access attempt : UDP from 125.25.145.239:9257 to 219.84.31.245:17777
2008/05/10 20:50:48 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:51:14 : Blocked access attempt : TCP from 61.229.229.162:1454 to 219.84.31.245:17777
2008/05/10 20:51:18 : Blocked access attempt : TCP from 69.60.7.210:80 to 219.84.31.245:2165
2008/05/10 20:51:23 : Blocked access attempt : TCP from 61.229.229.162:1454 to 219.84.31.245:17777
2008/05/10 20:51:31 : Blocked access attempt : TCP from 69.60.7.199:80 to 219.84.31.245:2609
2008/05/10 20:52:00 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:52:19 : Blocked access attempt : TCP from 61.229.229.162:1564 to 219.84.31.245:17777
2008/05/10 20:52:37 : Blocked access attempt : UDP from 218.82.99.146:11544 to 219.84.31.245:17777
2008/05/10 20:53:04 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:53:08 : Blocked access attempt : UDP from 221.10.51.202:28222 to 219.84.31.245:14947
2008/05/10 20:53:15 : Blocked access attempt : TCP from 61.229.229.162:1637 to 219.84.31.245:17777
2008/05/10 20:53:58 : Blocked access attempt : UDP from 210.6.183.143:18772 to 219.84.31.245:17777
2008/05/10 20:54:08 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:54:09 : Blocked access attempt : TCP from 61.229.229.162:1699 to 219.84.31.245:17777
2008/05/10 20:55:12 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:55:14 : Blocked access attempt : TCP from 61.229.229.162:1771 to 219.84.31.245:17777
2008/05/10 20:55:38 : Blocked access attempt : UDP from 220.31.248.14:12833 to 219.84.31.245:17777
2008/05/10 20:55:57 : Blocked access attempt : UDP from 84.54.158.155:27676 to 219.84.31.245:17777
2008/05/10 20:55:59 : Blocked access attempt : TCP from 221.130.187.159:51204 to 219.84.31.245:22
2008/05/10 20:56:02 : Blocked access attempt : TCP from 61.229.229.162:1841 to 219.84.31.245:17777
2008/05/10 20:56:05 : Blocked access attempt : UDP from 41.200.220.57:9939 to 219.84.31.245:17777
2008/05/10 20:56:11 : Blocked access attempt : TCP from 61.229.229.162:1841 to 219.84.31.245:17777
2008/05/10 20:56:15 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:56:19 : Blocked access attempt : UDP from 79.130.179.169:8122 to 219.84.31.245:17777
2008/05/10 20:56:40 : Blocked access attempt : UDP from 81.235.254.47:63357 to 219.84.31.245:17777
2008/05/10 20:56:58 : Blocked access attempt : TCP from 61.229.229.162:1917 to 219.84.31.245:17777
2008/05/10 20:57:19 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:57:54 : Blocked access attempt : TCP from 61.229.229.162:1989 to 219.84.31.245:17777
2008/05/10 20:58:23 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:58:53 : Blocked access attempt : TCP from 61.229.229.162:2064 to 219.84.31.245:17777
2008/05/10 20:59:20 : Blocked access attempt : UDP from 211.124.37.170:19198 to 219.84.31.245:17777
2008/05/10 20:59:27 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 20:59:48 : Blocked access attempt : TCP from 61.229.229.162:2135 to 219.84.31.245:17777
2008/05/10 20:59:50 : Blocked access attempt : UDP from 83.50.4.103:48001 to 219.84.31.245:17777
2008/05/10 20:59:51 : Blocked access attempt : TCP from 61.229.229.162:2135 to 219.84.31.245:17777
2008/05/10 21:00:07 : Blocked access attempt : UDP from 124.120.76.33:13096 to 219.84.31.245:17777
2008/05/10 21:00:31 : Blocked access attempt : TCP from 74.6.159.46:8888 to 219.84.31.245:2531
2008/05/10 21:00:44 : Blocked access attempt : TCP from 61.229.229.162:2206 to 219.84.31.245:17777
2008/05/10 21:00:44 : Blocked access attempt : UDP from 196.12.225.18:21625 to 219.84.31.245:17777
2008/05/10 21:00:47 : Blocked access attempt : TCP from 61.229.229.162:2206 to 219.84.31.245:17777
2008/05/10 21:01:20 : Blocked access attempt : UDP from 89.156.188.146:15146 to 219.84.31.245:17777
2008/05/10 21:01:30 : Blocked access attempt : UDP from 60.242.234.77:60000 to 219.84.31.245:17777
2008/05/10 21:01:38 : Blocked access attempt : TCP from 61.229.229.162:2271 to 219.84.31.245:17777
2008/05/10 21:02:07 : Blocked access attempt : TCP from 202.113.91.4:6000 to 219.84.31.245:1433
2008/05/10 21:02:35 : Blocked access attempt : TCP from 61.229.229.162:2342 to 219.84.31.245:17777
2008/05/10 21:03:45 : Blocked access attempt : UDP from 79.186.144.160:23028 to 219.84.31.245:17777
2008/05/10 21:04:26 : Blocked access attempt : TCP from 61.229.229.162:2478 to 219.84.31.245:17777
2008/05/10 21:04:50 : Blocked access attempt : UDP from 83.44.166.117:10890 to 219.84.31.245:17777
2008/05/10 21:05:22 : Blocked access attempt : TCP from 61.229.229.162:2549 to 219.84.31.245:17777
2008/05/10 21:05:50 : Blocked access attempt : UDP from 82.119.83.94:20865 to 219.84.31.245:17777
2008/05/10 21:06:17 : Blocked access attempt : TCP from 61.229.229.162:2618 to 219.84.31.245:17777
2008/05/10 21:07:43 : Blocked access attempt : UDP from 195.111.64.130:8300 to 219.84.31.245:17777
2008/05/10 21:08:09 : Blocked access attempt : TCP from 61.229.229.162:2793 to 219.84.31.245:17777
2008/05/10 21:09:20 : Blocked access attempt : UDP from 82.10.200.221:10371 to 219.84.31.245:17777
2008/05/10 21:09:44 : Blocked access attempt : UDP from 117.193.160.73:10078 to 219.84.31.245:17777
2008/05/10 21:10:01 : Blocked access attempt : TCP from 61.229.229.162:2937 to 219.84.31.245:17777
2008/05/10 21:10:29 : Blocked access attempt : UDP from 85.74.228.49:20925 to 219.84.31.245:17777
2008/05/10 21:10:37 : Blocked access attempt : UDP from 83.228.43.51:24469 to 219.84.31.245:17777
2008/05/10 21:11:14 : Blocked access attempt : TCP from 61.229.229.162:3020 to 219.84.31.245:17777
2008/05/10 21:12:40 : Blocked access attempt : UDP from 85.217.180.92:17545 to 219.84.31.245:17777
2008/05/10 21:12:49 : Blocked access attempt : UDP from 218.82.99.146:11544 to 219.84.31.245:17777
2008/05/10 21:13:04 : Blocked access attempt : TCP from 61.229.229.162:3153 to 219.84.31.245:17777
2008/05/10 21:13:55 : Blocked access attempt : TCP from 122.116.16.75:11752 to 219.84.31.245:1413
2008/05/10 21:13:55 : Blocked access attempt : TCP from 220.133.72.110:1449 to 219.84.31.245:1267
2008/05/10 21:13:56 : Blocked access attempt : TCP from 123.194.59.248:54478 to 219.84.31.245:1429
2008/05/10 21:13:59 : Blocked access attempt : TCP from 122.116.16.75:11752 to 219.84.31.245:1413
2008/05/10 21:13:59 : Blocked access attempt : UDP from 210.6.183.143:18772 to 219.84.31.245:17777
2008/05/10 21:13:59 : Blocked access attempt : TCP from 220.133.72.110:1449 to 219.84.31.245:1267
2008/05/10 21:14:00 : Blocked access attempt : TCP from 61.229.229.162:3226 to 219.84.31.245:17777
2008/05/10 21:14:00 : Blocked access attempt : TCP from 123.194.59.248:54478 to 219.84.31.245:1429
2008/05/10 21:14:03 : Blocked access attempt : TCP from 61.229.229.162:3226 to 219.84.31.245:17777
2008/05/10 21:14:06 : Blocked access attempt : TCP from 122.116.16.75:11752 to 219.84.31.245:1413
2008/05/10 21:14:07 : Blocked access attempt : TCP from 220.133.72.110:1449 to 219.84.31.245:1267
2008/05/10 21:14:09 : Blocked access attempt : TCP from 61.229.229.162:3226 to 219.84.31.245:17777
2008/05/10 21:14:09 : Blocked access attempt : TCP from 123.194.59.248:54478 to 219.84.31.245:1429
2008/05/10 21:14:20 : Blocked access attempt : TCP from 122.116.16.75:11752 to 219.84.31.245:1413
2008/05/10 21:14:23 : Blocked access attempt : UDP from 77.134.93.232:64640 to 219.84.31.245:17777
2008/05/10 21:14:23 : Blocked access attempt : TCP from 220.133.72.110:1449 to 219.84.31.245:1267
2008/05/10 21:14:24 : Blocked access attempt : UDP from 58.41.70.79:13685 to 219.84.31.245:17777
2008/05/10 21:14:27 : Blocked access attempt : TCP from 123.194.59.248:54478 to 219.84.31.245:1429
2008/05/10 21:14:56 : Blocked access attempt : TCP from 61.229.229.162:3294 to 219.84.31.245:17777
2008/05/10 21:15:15 : Blocked access attempt : UDP from 220.31.248.14:12833 to 219.84.31.245:17777
2008/05/10 21:16:00 : Blocked access attempt : TCP from 61.229.229.162:3378 to 219.84.31.245:17777
2008/05/10 21:16:41 : Blocked access attempt : UDP from 81.235.254.47:63357 to 219.84.31.245:17777

幾個星期前！架了APPSERV，在工作上有測試性質的東西需要做！之後就持續被攻擊了！
兩個星期前，我把APPSERV關掉了！還是一樣被攻擊！APPSERV也不知道該不該繼續架！
防火牆也只是3COM內建的功能！雖然還算堪用！但是我真的不知道這些IP持續PING下去對我會造成什麼影響！
以上IP只是某小部分而已！基本上他是天天換！應該是BOT吧！

各位鄉民們，我該怎麼辦？
我的電腦上一點值錢的東西都沒有！
我也不懂為什麼會被持續攻擊！
電腦也沒有什麼明顯被HACK的痕跡！
他們就是這樣一直PING我的電腦而已？？
這樣很快樂嗎？

不知道是不是我的錯覺，但是我總覺得網路慢了點！尤其是用到上傳和連到國外SERVER的時候！

有辦法攻擊回去嗎？唉～～～

整個無言中！

2008-05-10 21:31 發佈

文章關鍵字 DDOS攻擊小民

asd123654

asd123654
個人積分：1分
文章編號：6080674

1分

2樓

2008-05-10 22:15

我的電腦抓BT的時候也常常有這種東西耶= =
想起老師所說的
有很多人只是要練習= =

minisis

minisis
個人積分：25分
文章編號：6081025

25分

3樓

2008-05-10 22:39

我電腦在成大宿舍也是這樣被搞
我看紀錄有那一分鐘被噹2155次的...傻掉

augesth

augesth
個人積分：514分
文章編號：6082240

514分

樓主

2008-05-10 23:48

這種不知所謂的DDOS攻擊實際上會對我們造成影響嗎？
雖然被BLOCK了！可是我還是有點擔心！
而且我需要架APPSERV～剛剛受不了！還是架了！

我個人認為我算是會小心維護網路安全的人了！
沒想到每次要中都來大條的～～～

前幾天才中了一個TEMPAQ（實際病毒的名字我忘了）

瀏覽大陸伺服器的時候隨著ZIP檔一起下來的！
我裝著卡巴！解壓以後！卡巴馬上檔掉了！但是這個毒可怕的是，
不斷的在window下生產一些rundll 的碼！
卡巴檔～他生產！完全找不到路徑，他會不斷的更改！
用對岸寫針對他的掃毒碼也沒用！

好死不死！卡巴拼命檔，他拼命生～～～～就這樣～～～電腦就掛了！
安全模式好不容易進去了～也是死給你看！

還原更別說了～一點屁用都沒有～

悲哀阿～

17777這個PORT不知道是拿來做什麼用的？

我喜歡一個人，坐在海邊然後自言自語

Champion Hare

Champion Hare
個人積分：57分
文章編號：6086438

57分

5樓

2008-05-11 11:14

<-- 以下 strike
不知道為甚麼會有一大堆人認為卡巴防毒能力很好…是中了PCZONE的毒嗎？

至於防火牆，正常的policy應該是把全部關掉，只開需要的，17777你管它誰用的（當然是它隨機生的），進來的只開需要的部分，比方說你有架Web Server，打開80和443，剩下全部都關掉。出去的部分比較沒關係，全開也OK。

當然你本機部分軟體要確定是乾淨的，一堆人用某某XP，人家在裡面塞了一大堆東西，結果還是卡八拿來掃一掃就當作沒事，實在是沒得說。
以上strike -->

augesth

augesth
個人積分：514分
文章編號：6086752

514分

樓主

2008-05-11 11:42

Champion Hare wrote:
不知道為甚麼會有一大...(恕刪)

沒人在討論卡巴好還是壞？更沒有人說有使用某些幾合一XP！
在討論DDOS攻擊，你沒事扯到卡巴去做啥？

唯一提到PORT17777，你還連回答都沒回答咧～

你來亂的阿？

我喜歡一個人，坐在海邊然後自言自語

Roger Shih

Roger Shih
個人積分：10分
文章編號：6086814

10分

7樓

2008-05-11 11:50

可參考資安論壇

http://forum.icst.org.tw/phpBB2/viewtopic.php?t=75

以下是 port 17777 可能用途跟病毒/木馬可能使用性的說明
http://www.auditmypc.com/port/tcp-port-17777.asp

Champion Hare

Champion Hare
個人積分：57分
文章編號：6088712

57分

8樓

2008-05-11 15:29

augesth wrote:
沒人在討論卡巴好還是壞？更沒有人說有使用某些幾合一XP！
在討論DDOS攻擊，你沒事扯到卡巴去做啥？

唯一提到PORT17777，你還連回答都沒回答咧～

你來亂的阿？

問問題的這麼凶，那你自己慢慢玩啊，當我沒說過。

簡單的方法可以搞定的事情，一定要照著你迂迴的方法幫你解決嗎？

至於port 17777，google沒用過嗎？我還以為是常識咧。

a0931389646

a0931389646
個人積分：61分
文章編號：6089279

61分

9樓

2008-05-11 16:45

Champion Hare wrote:
問問題的這麼凶，那你...(恕刪)

文不對題你還講一堆有的沒的
真是好笑

augesth

augesth
個人積分：514分
文章編號：6091323

514分

樓主

2008-05-11 20:41

Champion Hare wrote:

問問題的這麼凶...(恕刪)

也不先看看自己回應別人的口氣？
笑話，我不噹你我噹誰？

先注意自己的態度！

至於你到底有沒有回應到重點？
請大家自己分析吧！

Roger Shih wrote:
可參考資安論壇

h...(恕刪)

謝謝你！很受用！

我喜歡一個人，坐在海邊然後自言自語