bugmenot | Дата: Понедельник, 26.11.2018, 15:26 | Сообщение # 1 |
Группа: Проверенные
Сообщений: 34
Репутация: 0
Статус: Offline
| Имеется регистратор DS-N108P он постоянно пытается сканировать всю локальную сеть за что его блокирует фаервол на шлюзовом сервере. версия прошивки регистратора V3.0.23 build 180720(до этого были испробованы еще 3 более старые), все облачные сервисы отключены, порты на внешку проброшены вручную, ip регистратору выделяется на данный момент через DHCP (но до этого был прописан вручную), внутри сети через IVMS и браузер просмотр нормальный, соотвественно из интернета до него не достучатся именно по SDK порту(но бывают промежутки времени когда можно подключится но это большая редкость). При этом по 80 порту к регистратору можно подключится из вне безпроблем.
Код [24/Nov/2018 10:16:58] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 10:16:58 2018" username="not logged yet" [24/Nov/2018 10:43:59] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 10:43:59 2018" username="not logged yet" [24/Nov/2018 10:51:34] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 10:51:34 2018" username="not logged yet" [24/Nov/2018 11:23:36] PORTSCAN firewall="srv-moloko-pop" hostip="23.229.231.231" hostname="23.229.231.231" log="protocol: TCP, source: 23.229.231.231, destination: 192.168.100.2, ports: 56581, 43531, 80, 25475, 62598, 33937, 7086, 32477, 13026, 30956, ..." time="Sat Nov 24 11:23:36 2018" username="not logged yet" [24/Nov/2018 14:27:08] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.108" hostname="192.168.1.108" log="protocol: UDP, source: 192.168.1.108, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 14:27:08 2018" username="not logged yet" [24/Nov/2018 15:07:29] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 15:07:29 2018" username="not logged yet" [24/Nov/2018 17:10:24] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sat Nov 24 17:10:24 2018" username="not logged yet" [24/Nov/2018 20:33:01] PORTSCAN firewall="srv-moloko-pop" hostip="223.105.4.245" hostname="223.105.4.245" log="protocol: TCP, source: 223.105.4.245, destination: 192.168.100.2, ports: 65301, 51225, 808, 9001, 3129, 80, 3979, 65205, 8888, 443, ..." time="Sat Nov 24 20:33:01 2018" username="not logged yet" [25/Nov/2018 02:54:29] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sun Nov 25 02:54:29 2018" username="not logged yet" [25/Nov/2018 08:27:55] PORTSCAN firewall="srv-moloko-pop" hostip="89.248.172.90" hostname="89.248.172.90" log="protocol: TCP, source: 89.248.172.90, destination: 192.168.100.2, ports: 53281, 9000, 41258, 4145, 1080, 3128, 80, 8060, 8080, 8118, ..." time="Sun Nov 25 08:27:55 2018" username="not logged yet" [25/Nov/2018 09:36:30] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.108" hostname="192.168.1.108" log="protocol: UDP, source: 192.168.1.108, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sun Nov 25 09:36:30 2018" username="not logged yet" [25/Nov/2018 10:04:34] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.108" hostname="192.168.1.108" log="protocol: UDP, source: 192.168.1.108, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sun Nov 25 10:04:34 2018" username="not logged yet" [25/Nov/2018 15:36:07] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.108" hostname="192.168.1.108" log="protocol: UDP, source: 192.168.1.108, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sun Nov 25 15:36:07 2018" username="not logged yet" [25/Nov/2018 16:23:35] PORTSCAN firewall="srv-moloko-pop" hostip="89.248.172.90" hostname="89.248.172.90" log="protocol: TCP, source: 89.248.172.90, destination: 192.168.100.2, ports: 53281, 808, 9000, 41258, 4145, 61234, 1080, 3128, 8080, 8888, ..." time="Sun Nov 25 16:23:35 2018" username="not logged yet" [25/Nov/2018 17:44:32] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Sun Nov 25 17:44:32 2018" username="not logged yet" [25/Nov/2018 23:09:14] PORTSCAN firewall="srv-moloko-pop" hostip="89.248.172.90" hostname="defiant.proxyblocker.org" log="protocol: TCP, source: 89.248.172.90, destination: 192.168.100.2, ports: 53281, 9000, 41258, 4145, 61234, 1080, 80, 8080, 8118, 8888, ..." time="Sun Nov 25 23:09:14 2018" username="not logged yet" [26/Nov/2018 02:27:43] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 02:27:43 2018" username="not logged yet" [26/Nov/2018 03:15:50] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 03:15:50 2018" username="not logged yet" [26/Nov/2018 07:54:16] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.108" hostname="192.168.1.108" log="protocol: UDP, source: 192.168.1.108, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 07:54:16 2018" username="not logged yet" [26/Nov/2018 08:30:05] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 08:30:05 2018" username="not logged yet" [26/Nov/2018 08:47:09] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 08:47:09 2018" username="not logged yet" [26/Nov/2018 09:20:07] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 09:20:07 2018" username="not logged yet" [26/Nov/2018 09:42:40] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 09:42:40 2018" username="not logged yet" [26/Nov/2018 09:57:51] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 09:57:51 2018" username="not logged yet" [26/Nov/2018 10:43:21] PORTSCAN firewall="srv-moloko-pop" hostip="192.168.1.251" hostname="192.168.1.251" log="protocol: UDP, source: 192.168.1.251, destination: 239.255.255.250, 255.255.255.255, ..., ports: 10001, 7701, 69, 2380, 6005, 3702, 37020, 10670, 4022, 1757, ..." time="Mon Nov 26 10:43:21 2018" username="not logged yet"
адрес регистратор 192.168.1.251 адрес второго регистратора 192.168.1.108 (DS-N116 V3.0.18 build 160401 облако выключено upnp выключено) адрес шлюза 192.168.1.254 смотрит в сеть 192.168.100.2 DMZ адрес промежутной сети с интернетом 192.168.100.1 соответсвенно вопрос: 1 сталкивался кто нибудеь с таким? 2 могутли смуглые братья чтолибо подсунуть в прошивке или на аппаратаном уровне?
|
|
|
|