恩山无线论坛

 找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
查看: 668|回复: 7

[k3] 帮我看一下我的路由器是不是被攻击了?刷的TB梅林

[复制链接]
发表于 2020-2-2 11:41 | 显示全部楼层 |阅读模式
Feb  2 09:58:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:58:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:58:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 09:59:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:00:00 crond[692]: USER admin pid 10736 cmd /koolshare/scripts/ddnsto_check.sh
Feb  2 10:00:02 kernel: net_ratelimit: 6 callbacks suppressed
Feb  2 10:01:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:01:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:01:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:01:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:01 kernel: net_ratelimit: 2 callbacks suppressed
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:02:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:03:01 kernel: net_ratelimit: 7 callbacks suppressed
Feb  2 10:03:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:05:00 crond[692]: USER admin pid 12941 cmd /koolshare/scripts/ddnsto_check.sh
Feb  2 10:06:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:06:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:06:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:06:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:06:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:02 kernel: net_ratelimit: 1 callbacks suppressed
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:07:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:58 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:59 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:59 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
Feb  2 10:09:59 kernel: TCP: Possible SYN flooding on port 34797. Sending cookies.
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2020-2-2 11:41 | 显示全部楼层
一直是34797这个端口
我的恩山、我的无线 The best wifi forum is right here.
发表于 2020-2-2 13:31 | 显示全部楼层
可能是 内部某个设备发起的

点评

会不会是DDNS解析的原因?  详情 回复 发表于 2020-2-2 20:48
我的恩山、我的无线 The best wifi forum is right here.
发表于 2020-2-2 14:02 | 显示全部楼层
关掉网络设备查找一下那个设备在偷

点评

会不会是DDNS解析的原因?  详情 回复 发表于 2020-2-2 20:48
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2020-2-2 20:48 | 显示全部楼层
juyyao 发表于 2020-2-2 13:31
可能是 内部某个设备发起的

会不会是DDNS解析的原因?
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2020-2-2 20:48 | 显示全部楼层
小白贰码叁 发表于 2020-2-2 14:02
关掉网络设备查找一下那个设备在偷

会不会是DDNS解析的原因?
我的恩山、我的无线 The best wifi forum is right here.
发表于 2020-2-7 23:34 | 显示全部楼层
不懂。帮顶
我的恩山、我的无线 The best wifi forum is right here.
发表于 2020-2-14 12:47 | 显示全部楼层
打开syn cookies 调整下参数 再试试
sysctl -w net.ipv4.tcp_syncookies=1
sysctl -w net.core.somaxconn=65535
sysctl -w net.core.netdev_max_backlog=65536
sysctl -w net.ipv4.tcp_max_syn_backlog=655350
sysctl -w net.ipv4.tcp_max_tw_buckets=655350

我的恩山、我的无线 The best wifi forum is right here.
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|手机版|小黑屋|Archiver|恩山无线论坛(常州市恩山计算机开发有限公司版权所有) ( 苏ICP备05084872号 )|网站地图

GMT+8, 2020-10-20 08:13

Powered by Discuz! X3.4

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表