English | Vietnamese
 

banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register   [Login] Login [  http  | https  ]
 
Messages posted by: angel_of_devil  XML
Profile for angel_of_devil Messages posted by angel_of_devil [ number of posts not being displayed on this page: 0 ]
 
Thảo luận bảo mật  Empty  Go to message
Mình đã sửa lại rồi, mong mọi người giúp đỡ smilie(
Thảo luận bảo mật  Empty  Go to message
Chủ nhân của IP kia ở TP mang tên Bác: smilie

Code:
inetnum: 222.252.128.0 - 222.252.255.255
netname: vtn-net
country: vn
descr: Vietnam Telecom National
admin-c: HT251-AP
tech-c: NV54-AP
status: ALLOCATED NON-PORTABLE
changed: <a href="mailto:hm-changed@vnnic.net.vn">hm-changed@vnnic.net.vn</a> 20061025
mnt-by: MAINT-VN-VNPT
source: APNIC
person: Hoang Thi Bich Thuy
nic-hdl: HT251-AP
e-mail: <a href="mailto:thuyhb_vtn@vnpt.com.vn">thuyhb_vtn@vnpt.com.vn</a>
address: 57A Huynh Thuc Khang, Ha Noi
phone: +84-477-34735
fax-no: +84-477-34740
country: vn
changed: <a href="mailto:hm-changed@vnnic.net.vn">hm-changed@vnnic.net.vn</a> 20061025
mnt-by: MAINT-VN-VNPT
source: APNIC
person: Nguyen Vu Dung
nic-hdl: NV54-AP
e-mail: <a href="mailto:dungnv_vtn@vnpt.com.vn">dungnv_vtn@vnpt.com.vn</a>
address: 57 A Huynh Thuc Khang, Ha Noi
phone: +84-477-34736
fax-no: +84-477-34740
country: vn
changed: <a href="mailto:hm-changed@vnnic.net.vn">hm-changed@vnnic.net.vn</a> 20061025
mnt-by: MAINT-VN-VNPT
source: APNIC
Thảo luận bảo mật  Empty  Go to message
Đây là hình netstat hiện tại, vì lúc bị nghẽn, mình quên ko chụp hình, ko thì có cả một loạt kết nối từ IP 222.252.196.177 đến server qua port 1433







Huhu
Thảo luận bảo mật  Empty  Go to message
Server chạy ổn định thì hôm nay chạy như rùa vì quá nhiều traffic qua port 1433
Mình chạy MS SQL 2005
Sau đây là log của firewall:

Code:
Time: 4/30/2007 1:31:04 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3344) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:05 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3364) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:05 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3364) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:05 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3381) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:06 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3381) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:06 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3397) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:06 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3397) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:07 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3415) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:07 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3415) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:07 PM
Event: Application
Description: Windows NT BASE API Client DLL (kernel32.dll)
Path: C:\WINDOWS\system32\Kernel32.dll
Message: Allowed Application Hook
Time: 4/30/2007 1:31:08 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3592) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:08 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3592) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:09 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3611) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:09 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3611) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:10 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3627) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:10 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3627) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:10 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3644) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:10 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3644) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:11 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3663) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:11 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3663) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:12 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3842) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:12 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3842) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:13 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3859) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:13 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3859) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:14 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3876) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:14 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3876) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:15 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3893) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:15 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3893) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:15 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3912) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:16 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (3912) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:16 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (4091) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:16 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (4091) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:17 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (4107) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:17 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (4107) Destination 10.0.0.1 : (1433)
Time: 4/30/2007 1:31:18 PM
Event: Traffic
Address: 222.252.196.177
Description: SQL Server Windows NT (sqlservr.exe)
Path: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Message: Allowed Incoming TCP - Source 222.252.196.177 : (4125) Destination 10.0.0.1 : (1433)
................(tương tự).......................


Hiện tại mình block port 1433 ở router để server đỡ bị nghẽn rồi

Mong mọi người giúp đỡ và cho advive smilie(

Thanks
 
Go to Page:  First Page Page 2 3 4 5

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|