>> Read No. 65404 article  
서버가 공격을 당하고 있는거 같습니다. 대처 방법
좀..

등록 2003-01-27 01:01:00     조회 5
이름 박정도    

		리눅스 머신은 안전한것으로 알고 있는데 tcpdump를 통해서 1434포트를 검사해 보면
 다량에 데이타가 서버로 날라오고 있습니다.
  
 tcpdump udp port 1434
  
 00:51:23.132122 210.220.162.23.1040 > 224.144.83.132.ms-sql-m:  udp 376 [ttl 1]
00:51:23.465868 210.220.162.23.1040 > 224.105.129.14.ms-sql-m:  udp 376 [ttl 1]
00:51:23.799467 210.220.162.23.1040 > 224.130.127.232.ms-sql-m:  udp 376 [ttl 1]
00:51:24.132988 210.220.162.23.1040 > 224.219.221.96.ms-sql-m:  udp 376 [ttl 1]
00:51:24.472528 210.220.162.23.1040 > 224.193.119.44.ms-sql-m:  udp 376 [ttl 1]
00:51:24.817044 210.220.162.23.1040 > 224.180.55.83.ms-sql-m:  udp 376 [ttl 1]
00:51:25.155375 210.220.162.23.1040 > 224.26.103.238.ms-sql-m:  udp 376 [ttl 1]
00:51:25.494245 210.220.162.23.1040 > 224.128.143.110.ms-sql-m:  udp 376 [ttl 1]
00:51:25.833730 210.220.162.23.1040 > 224.230.48.25.ms-sql-m:  udp 376 [ttl 1]
00:51:26.178129 210.220.162.23.1040 > 224.153.52.51.ms-sql-m:  udp 376 [ttl 1]
00:51:26.517077 210.220.162.23.1040 > 224.127.75.226.ms-sql-m:  udp 376 [ttl 1]
00:51:26.855678 210.220.162.23.1040 > 224.101.155.41.ms-sql-m:  udp 376 [ttl 1]
00:51:27.189645 210.220.162.23.1040 > 224.126.112.154.ms-sql-m:  udp 376 [ttl 1]
00:51:27.527747 210.220.162.23.1040 > 224.228.238.235.ms-sql-m:  udp 376 [ttl 1]
00:51:27.872807 210.220.162.23.1040 > 224.23.225.71.ms-sql-m:  udp 376 [ttl 1]
00:51:28.200704 210.220.162.23.1040 > 224.163.198.173.ms-sql-m:  udp 376 [ttl 1]
00:51:28.539658 210.220.162.23.1040 > 224.137.12.61.ms-sql-m:  udp 376 [ttl 1]
00:51:28.873436 210.220.162.23.1040 > 224.162.18.101.ms-sql-m:  udp 376 [ttl 1]
00:51:29.201282 210.220.162.23.1040 > 224.46.73.219.ms-sql-m:  udp 376 [ttl 1]
00:51:29.540473 210.220.162.23.1040 > 224.148.207.24.ms-sql-m:  udp 376 [ttl 1]
00:51:29.890250 210.220.162.23.1040 > 224.212.218.75.ms-sql-m:  udp 376 [ttl 1]
00:51:30.229434 210.220.162.23.1040 > 224.58.186.117.ms-sql-m:  udp 376 [ttl 1]
00:51:30.562470 210.220.162.23.1040 > 224.147.246.8.ms-sql-m:  udp 376 [ttl 1]
00:51:30.906829 210.220.162.23.1040 > 224.6.228.213.ms-sql-m:  udp 376 [ttl 1]
00:51:31.251984 210.220.162.23.1040 > 224.185.63.151.ms-sql-m:  udp 376 [ttl 1]
00:51:31.590149 210.220.162.23.1040 > 224.159.6.113.ms-sql-m:  udp 376 [ttl 1]
00:51:31.918758 210.220.162.23.1040 > 224.43.4.104.ms-sql-m:  udp 376 [ttl 1]
00:51:32.263302 210.220.162.23.1040 > 224.158.227.33.ms-sql-m:  udp 376 [ttl 1]
00:51:32.596532 210.220.162.23.1040 > 224.247.224.4.ms-sql-m:  udp 376 [ttl 1]
00:51:32.924653 210.220.162.23.1040 > 224.131.102.72.ms-sql-m:  udp 376 [ttl 1]
00:51:33.264320 210.220.162.23.1040 > 224.105.124.29.ms-sql-m:  udp 376 [ttl 1]
00:51:33.597253 210.220.162.23.1040 > 224.130.58.36.ms-sql-m:  udp 376 [ttl 1]
00:51:33.930502 210.220.162.23.1040 > 224.219.88.121.ms-sql-m:  udp 376 [ttl 1]
00:51:34.269553 210.220.162.23.1040 > 224.193.114.109.ms-sql-m:  udp 376 [ttl 1]
00:51:34.608760 210.220.162.23.1040 > 224.167.69.110.ms-sql-m:  udp 376 [ttl 1]
00:51:34.947775 210.220.162.23.1040 > 224.141.81.97.ms-sql-m:  udp 376 [ttl 1]
00:51:35.281556 210.220.162.23.1040 > 224.166.64.160.ms-sql-m:  udp 376 [ttl 1]
00:51:35.620774 210.220.162.23.1040 > 224.12.123.62.ms-sql-m:  udp 376 [ttl 1]
00:51:35.965058 210.220.162.23.1040 > 224.63.203.158.ms-sql-m:  udp 376 [ttl 1]
00:51:36.293595 210.220.162.23.1040 > 224.203.168.205.ms-sql-m:  udp 376 [ttl 1]
00:51:36.621203 210.220.162.23.1040 > 224.87.234.89.ms-sql-m:  udp 376 [ttl 1]
00:51:36.970845 210.220.162.23.1040 > 224.151.101.228.ms-sql-m:  udp 376 [ttl 1]
00:51:37.304375 210.220.162.23.1040 > 224.48.123.145.ms-sql-m:  udp 376 [ttl 1]
00:51:37.654444 210.220.162.23.1040 > 224.112.70.71.ms-sql-m:  udp 376 [ttl 1]
00:51:37.988349 210.220.162.23.1040 > 224.73.236.14.ms-sql-m:  udp 376 [ttl 1]
00:51:38.333382 210.220.162.23.1040 > 224.60.82.195.ms-sql-m:  udp 376 [ttl 1]
00:51:38.677817 210.220.162.23.1040 > 224.111.134.234.ms-sql-m:  udp 376 [ttl 1]
00:51:39.016607 210.220.162.23.1040 > 224.85.62.37.ms-sql-m:  udp 376 [ttl 1]
00:51:39.344523 210.220.162.23.1040 > 224.225.189.164.ms-sql-m:  udp 376 [ttl 1]
  
 공격맞죠? ㅠ.ㅠ
이름
암호


>> 관련글
65404 서버가 공격을 당하고 있는거 같습니다. 대처 방법좀..  박정도  2003.01.27  ....
  답장 RE: 서버가 공격을 당하고 있는거 같습니다. 대처 방법좀..  고영훈  2003.01.27  ....
Register [ localhost 목록보기 윗글 아랫글
글쓰기
답장쓰기 수정 삭제
정규표현식 [ 상세 검색 ]
페이지로딩: [ 0.10 초 ] 작업시간: [ 0.03 초 ]

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved
[TOP]

적수네 동네
+
| 적수네 동네
| 공부방
| 리눅스 잡지 서고
| LSN 소스
| 링크 모음
+---+
게시판
+
| 떠들어보세!
| 질문과 답변
| 새소식과 정보
| 1원짜리 팁?
| 대화방
+---+
칼럼?
+
| 세하 훔쳐보기
| Welcome2nite
| 혜진의 염장판
+---+
리눅스 상표권
+
| 반대 서명란
| 토론 게시판
+---+
GNU
+
| GNU 선언문
| GNU GPL
| GNU 미러 목록
+---+
프로젝트?
+
| 리눅스카운터
| RC5DES
| 실질헌법 제작
+---+
커널 소식
+
| 안정 버젼: 2.4.14
+---+
테마 선택
+
LSN 방송국?
+
| OFF AIR
+---+
회원
+
| 로그인
+---+
[ 적수네 동네 ] [ 리눅스 상표권 독점 반대 ] [ 한글 리눅스 문서 프로젝트 ] [ KrLine ] [ 사랑넷 ] [ Valid HTML 4.0! ] [ SlashDot ] [ Freshmeat ]
Copyleft (C) 1998-2001 Byeong-Chan Kim . License
TIME: 1791037978
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.