1 月 25, 2009 • Tags: , • Posted in: Centos5, Firewall

自宅サーバへのアタックの実情

warning-shield 2つのドメインを割り当てていることも関係あるかもしれないが、自宅サーバは結構な頻度でアタックを受けている。

昨日は、ポートスキャンもあった。
出来ればルータでポートを絞っておきたいところだが、構成上やりにくいので、サーバ側のF/Wでフィルタリングしている。
F/W設定をしてなかったら、これらの攻撃が直接各サービスに到達してしまうと思うと、怖いですね。

——————— iptables firewall Begin ————————
Logged 402 packets on interface eth0
From 58.241.193.61 - 1 packet to udp(1434)
From 59.81.64.229 - 1 packet to udp(1434)
From 60.15.177.163 - 3 packets to udp(1026,1027)
From 60.15.177.164 - 1 packet to udp(1027)
From 60.190.216.113 - 2 packets to tcp(5900)
From 60.222.224.130 - 2 packets to udp(1026)
From 60.222.224.131 - 3 packets to udp(1026,1027)
From 60.222.224.132 - 3 packets to udp(1026,1027)
From 61.153.58.189 - 1 packet to udp(1434)
From 66.96.134.31 - 1 packet to tcp(1024)
From 70.110.161.139 - 1 packet to tcp(1080)
From 72.21.40.11 - 5 packets to tcp(53054)
From 122.96.147.82 - 1 packet to tcp(1433)
From 122.193.4.5 - 1 packet to tcp(22)
From 125.252.227.184 - 3 packets to tcp(2743)
From 189.35.223.185 - 1 packet to tcp(4899)
From 195.64.178.23 - 2 packets to tcp(21)
From 202.97.238.227 - 2 packets to udp(1026)
From 202.97.238.229 - 2 packets to udp(1026,1027)
From 202.99.11.99 - 1 packet to udp(1434)
From 202.105.13.204 - 1 packet to tcp(1433)
From 202.225.94.247 - 170 packets to udp(1156,1367,1415,1851,1977,2192,2354,2508,2801,3306,3311,3319,3496,4481,5200,6698,6957,7288,7337,8868,9246,9711,10362,11279,11837,11873,12594,13213,13590,14122,14301,14999,15099,15253,15438,15899,17375,17385,17792,18110,18169,18269,18271,18961,20897,20966,21726,21740,22004,22669,22997,23068,23763,24090,24450,24490,24588,25396,25760,25976,26398,26944,26958,27154,27492,28031,28784,29079,29546,29859,30470,31049,31055,31427,31963,32210,32393,32429,32951,32990,33121,35338,36033,36586,36672,36795,37621,37642,38377,38603,39156,39196,39253,39364,39657,39771,40134,40191,40670,40841,40881,41321,41705,41833,42353,42791,42942,43330,43631,43657,44498,45742,46278,46374,46458,47256,47384,47663,48242,48337,49400,49638,49960,50303,51236,51447,51520,51671,52286,52345,52598,52714,52722,53152,53433,53990,54245,55479,55703,55728,56323,56333,56555,57141,57265,57299,57595,57801,57942,58221,58879,59782,59849,59906,60436,60517,60812,61078,61081,61152,61795,61
822,61892,62235,63048,64083,64428,64446,64582)
From 210.75.11.86 - 1 packet to tcp(1433)
From 210.147.240.193 - 191 packets to udp(1129,1138,1494,1528,1932,2024,2050,2158,2284,2742,3064,3765,4417,5490,6151,6683,7209,7744,8003,8173,8694,8814,9844,9929,10188,10289,10399,10471,10953,12112,13724,14115,14255,14570,15016,15109,15500,15583,15664,15808,16008,16135,17029,17917,18884,19255,19445,19755,19871,21926,22314,22351,22479,23376,23428,23915,23933,24126,24768,24995,25141,25340,25449,25460,25528,25774,25817,25959,26013,26028,26156,26335,27546,27644,27769,28008,28359,29300,29376,29493,29999,30327,30745,31123,32287,32342,32881,32903,33219,33268,33451,33595,34095,34141,34265,34352,34962,35340,35504,35531,35556,36329,36407,36519,37492,37616,37675,38318,38864,39258,39433,39662,39906,40511,40815,41301,41305,41393,42138,42141,42348,43548,43581,43941,44627,46212,46247,46596,46768,46826,47371,47422,47608,47727,49154,49319,49697,49896,50412,50442,50456,50797,51183,51360,52163,52489,52490,52699,52726,52801,52866,53409,53419,53658,53701,53744,53995,54579,55837,56444,56751,575
77,57579,57734,57796,57993,58092,58111,58143,58323,58419,59402,59882,60248,60570,60632,60691,60711,61207,61315,62484,62560,63014,63240,64066,64104,64208,64411,64983,65256,65504)
From 211.94.188.34 - 1 packet to tcp(21607)
From 222.73.49.83 - 1 packet to tcp(22)
———————- iptables firewall End ————————-

Leave a Reply