1

Каждый раз, когда мой маршрутизатор подключается к Интернету, я нахожу в предупреждении о проникновении в журнал брандмауэра моего маршрутизатора. Не могли бы вы объяснить, что это значит? Это на самом деле кто-то взломал мой роутер или это соединение сброшено роутером?

например

Mar 11 14:15:11     kernel  warning     kernel: [fwlog] Intrusion -> SRC=85.102.133.241 DST=109.78.126.234

Вот мой лог брандмауэра роутера полный лог

Mar 8 16:20:01  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.22 DST=109.78.153.90.
Mar 8 16:20:09  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.64 DST=109.78.153.90.
Mar 8 16:20:09  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.160 DST=109.78.153.90.
Mar 8 16:20:20  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:20  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:27  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:29  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.64 DST=109.78.153.90.
Mar 8 16:20:34  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:42  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:46  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:20:49  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.47 DST=109.78.153.90.
Mar 8 16:20:54  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:20:59  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:21:04  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.47 DST=109.78.153.90.
Mar 8 16:21:10  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:21:19  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:21:19  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:21:26  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:21:30  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:21:52  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.47 DST=109.78.153.90.
Mar 8 16:21:54  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:21:55  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:21:56  kernel  warning     kernel: [fwlog] Tcp port scan,SRC=54.229.249.228 DST=109.78.153.90. 
Mar 8 16:21:58  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:21:59  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.39 DST=109.78.153.90.
Mar 8 16:22:10  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.229.249.228 DST=109.78.153.90.
Mar 8 16:22:20  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.47 DST=109.78.153.90.
Mar 8 16:22:20  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.47 DST=109.78.153.90.
Mar 8 16:22:30  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:22:30  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:22:30  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:22:37  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:22:39  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.195.129.21 DST=109.78.153.90.
Mar 8 16:22:51  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.67.17 DST=109.78.153.90.
Mar 8 16:22:51  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.67.17 DST=109.78.153.90.
Mar 8 16:22:54  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.67.17 DST=109.78.153.90.
Mar 8 16:22:59  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.67.17 DST=109.78.153.90.
Mar 8 16:24:36  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:37  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:37  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:39  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:43  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:43  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:51  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:24:55  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:25:07  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:25:19  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:25:35  kernel  warning     kernel: [fwlog] Intrusion -> SRC=2.51.192.149 DST=109.78.153.90
Mar 8 16:25:39  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:25:44  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:45  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:46  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:46  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:47  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:48  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:48  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:48  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:52  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:52  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:25:53  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=144.76.139.143 DST=109.78.153.90.
Mar 8 16:26:07  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=92.123.72.206 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:56  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:57  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:57  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:26:57  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:03  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:11  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:11  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:16  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:24  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:27  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:37  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:39  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:45  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:46  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=54.220.35.30 DST=109.78.153.90.
Mar 8 16:27:59  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:27:59  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:01  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:32  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:39  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:48  kernel  warning     kernel: [fwlog] Tcp port scan, SRC=141.101.113.133 DST=109.78.153.90.
Mar 8 16:28:48  kernel  warning     kernel: [fwlog] Tcp port scan, SRCMar 11 14:10:52 kernel: [fwlog] Intrusion -> SRC=88.165.119.13 DST=109.78.126.234
Mar 11 14:15:11     kernel  warning     kernel: [fwlog] Intrusion -> SRC=85.102.133.241 DST=109.78.126.234
Mar 11 14:16:45     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:45     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:45     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:45     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:46     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:52     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:16:55     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:00     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:06     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:16     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:16     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:48     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:48     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:48     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:48     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:49     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:49     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:52     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:17:58     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:18:10     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:18:11     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
Mar 11 14:18:11     kernel  warning     kernel: [fwlog] Tcp port scan, SRC=66.196.65.112 DST=109.78.126.234.
|источник

2 ответа2

1

Совершенно нормально подвергаться сканированию портов в любое время и в режиме онлайн. Это печальная правда. Тем не менее, это не представляет риска, если у вас нет уязвимых служб, доступных в Интернете.

То, что вы видите, это просто информационное сообщение. Никакого вреда и попыток взлома не было.

|источник
1

Это не вторжение, это просто означает, что кто-то сканировал ваш маршрутизатор извне, чтобы попытаться найти открытый порт. Я бы об этом не беспокоился слишком сильно :)

Обычно на маршрутизаторе порты (думаю, что "шлюзы" из-за отсутствия лучшего слова) в вашу сеть закрыты. Эти порты могут быть открыты вручную по целому ряду причин (например, размещение собственного веб-сайта и т.д.).

"Хакеры" любят сканировать эти открытые порты, чтобы попытаться найти маршрут на ваш компьютер. Если вы не открыли их вручную, все будет в порядке. Если вы не уверены, вы можете запустить собственное сканирование портов здесь и посмотреть, есть ли у вас что-нибудь открытое :)

|источник

Всё ещё ищете ответ? Посмотрите другие вопросы с метками .