请教大神们个问题关于路由器分片是不是有攻击啊

hanxiang0423

Aug 25 06:56:11.736: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:11.738: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:12.182: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:12.182: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:03.761: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:03.761: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:04.711: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:04.711: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 07:07:10.632: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 71.6.232.6
Aug 25 07:10:23.749: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.491: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.751: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.751: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 13:01:32.797: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 193.201.224.236
Aug 25 14:12:20.534: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 189.112.226.205
Aug 25 15:23:09.224: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 42.51.178.141
请大神们给看一下Aug 25 06:56:11.736: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:11.738: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:12.182: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:56:12.182: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:03.761: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:03.761: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:04.711: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 06:58:04.711: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 150.138.209.4 destined to 1.202.139.73
Aug 25 07:07:10.632: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 71.6.232.6
Aug 25 07:10:23.749: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.491: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.751: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 07:20:15.751: %IP_VFR-3-OVERLAP_FRAGMENTS: GigabitEthernet0/0: from the host 59.47.224.122 destined to 1.202.139.73
Aug 25 13:01:32.797: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 193.201.224.236
Aug 25 14:12:20.534: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 189.112.226.205
Aug 25 15:23:09.224: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 42.51.178.141
这个是不是有攻击啊~应该怎么解决啊！查了好多资料了都没找到真正的答案啊

网络小白成长

要么暴力解决，直接把这些host过滤掉；要么就提升路由器接口的包重组能力，加强路由器的处理能力

hanxiang0423

我已经在接口上添加了ip virtual-reassembly in max-reassemblies 1024
                              ip virtual-reassembly out max-reassemblies 1024
但是还报这个。