查看: 863|回复: 4
|
求救:为何我电脑端口整天被人扫描??
[复制链接]
|
|
各位大大,
我电脑的防火墙经常显示我电脑端口被扫描,经过显示的IP后,似乎对方也是本地使用Streamyx的用户,但是这人似乎很奇怪,经常扫描我电脑段口,并且尝试传送文件进来,但是似乎都被仿火墙挡住了,请问有什么办法可以解决这问题呢?
2 10/30/2004 19:35:11 Port Scan Minor Incoming TCP 219.251.88.211 20-53-52-43-00-00 219.95.37.1 44-45-53-54-00-00 - - Normal 3 10/30/2004 19:33:58 10/30/2004 19:34:07
3 10/31/2004 16:14:25 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:13:23 10/31/2004 16:13:23
4 10/31/2004 16:16:54 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:16:55 10/31/2004 16:16:55
5 10/31/2004 16:18:06 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 2 10/31/2004 16:17:01 10/31/2004 16:17:01
6 10/31/2004 16:20:34 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:19:29 10/31/2004 16:19:29
7 10/31/2004 16:22:17 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 2 10/31/2004 16:21:13 10/31/2004 16:21:13
8 10/31/2004 16:23:39 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 4 10/31/2004 16:22:34 10/31/2004 16:22:37
9 10/31/2004 16:24:45 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 3 10/31/2004 16:23:41 10/31/2004 16:23:44
10 10/31/2004 16:28:36 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 3 10/31/2004 16:26:52 10/31/2004 16:27:34
11 10/31/2004 16:30:24 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:29:19 10/31/2004 16:29:19
12 10/31/2004 16:35:00 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 2 10/31/2004 16:34:47 10/31/2004 16:35:01
13 10/31/2004 16:41:00 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:39:57 10/31/2004 16:39:57
14 10/31/2004 16:42:43 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:42:44 10/31/2004 16:42:44
15 10/31/2004 16:43:55 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:42:50 10/31/2004 16:42:50
16 10/31/2004 16:46:50 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 2 10/31/2004 16:45:42 10/31/2004 16:45:48
17 10/31/2004 16:49:45 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 5 10/31/2004 16:49:37 10/31/2004 16:49:46
18 10/31/2004 16:53:06 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:52:04 10/31/2004 16:52:04
19 10/31/2004 16:57:47 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 16:57:48 10/31/2004 16:57:48
20 10/31/2004 16:58:59 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 4 10/31/2004 16:57:50 10/31/2004 16:57:57
21 10/31/2004 17:03:56 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 4 10/31/2004 17:02:05 10/31/2004 17:02:54
22 10/31/2004 17:06:05 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 10 10/31/2004 17:04:53 10/31/2004 17:05:02
23 10/31/2004 17:09:26 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 1 10/31/2004 17:09:27 10/31/2004 17:09:27
24 10/31/2004 17:09:57 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 4 10/31/2004 17:09:30 10/31/2004 17:09:58
25 10/31/2004 17:11:19 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 6 10/31/2004 17:10:04 10/31/2004 17:11:20
26 10/31/2004 17:13:16 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 5 10/31/2004 17:12:05 10/31/2004 17:12:14
27 10/31/2004 17:16:42 Port Scan Minor Incoming TCP 218.111.26.165 20-53-52-43-00-00 218.111.26.254 44-45-53-54-00-00 - - Normal 3 10/31/2004 17:15:30 10/31/2004 17:15:39
28 11/01/2004 19:16:55 Port Scan Minor Incoming TCP 219.156.163.161 20-53-52-43-00-00 219.95.37.117 44-45-53-54-00-00 - - Normal 3 11/01/2004 19:15:44 11/01/2004 19:15:53
29 11/01/2004 19:32:32 Port Scan Minor Incoming TCP 219.154.23.212 20-53-52-43-00-00 219.95.37.117 44-45-53-54-00-00 - - Normal 3 11/01/2004 19:32:12 11/01/2004 19:32:21
30 11/01/2004 21:29:57 Port Scan Minor Incoming TCP 219.95.37.58 20-53-52-43-00-00 219.95.37.117 44-45-53-54-00-00 - - Normal 6 11/01/2004 21:28:45 11/01/2004 21:28:53
31 11/02/2004 12:17:52 Port Scan Minor Incoming TCP 218.111.216.64 20-53-52-43-00-00 60.48.34.238 44-45-53-54-00-00 - - Normal 5 11/02/2004 12:16:58 11/02/2004 12:17:07
32 11/02/2004 14:28:19 Port Scan Minor Incoming TCP 218.111.180.91 20-53-52-43-00-00 218.111.180.74 44-45-53-54-00-00 - - Normal 2 11/02/2004 14:26:30 11/02/2004 14:27:18
33 11/03/2004 12:37:02 Port Scan Minor Incoming TCP 60.48.39.87 20-53-52-43-00-00 60.48.39.139 44-45-53-54-00-00 - - Normal 2 11/03/2004 12:35:52 11/03/2004 12:36:01
34 11/03/2004 12:42:36 Port Scan Minor Incoming TCP 60.48.39.87 20-53-52-43-00-00 60.48.39.139 44-45-53-54-00-00 - - Normal 3 11/03/2004 12:41:25 11/03/2004 12:41:31
35 11/03/2004 12:47:21 Port Scan Minor Incoming TCP 60.48.39.87 20-53-52-43-00-00 60.48.39.139 44-45-53-54-00-00 - - Normal 1 11/03/2004 12:47:03 11/03/2004 12:47:03
36 11/03/2004 18:40:01 Port Scan Minor Incoming TCP 218.208.220.65 20-53-52-43-00-00 218.111.25.2 44-45-53-54-00-00 - - Normal 1 11/03/2004 18:38:56 11/03/2004 18:38:56
而且尝试传送文件。
19365 11/03/2004 19:01:02 Blocked 10 Incoming TCP 218.111.183.88 20-53-52-43-00-00 4207 218.111.25.2 44-45-53-54-00-00 139 C:\WINDOWS\SYSTEM\kernel32.dll - - Normal 2 11/03/2004 18:59:58 11/03/2004 19:00:01 GUI%GUICONFIG#SRULE@NBBLOCK#BLOCK-TCP
19366 11/03/2004 19:01:07 Allowed 10 Outgoing TCP 210.150.253.178 20-53-52-43-00-00 80 218.111.25.2 44-45-53-54-00-00 1183 C:\Program Files\Internet Explorer\IEXPLORE.EXE - - Normal 1 11/03/2004 19:00:02 11/03/2004 19:00:02 Ask all running apps
19367 11/03/2004 19:01:32 Blocked 10 Incoming TCP 218.111.25.85 20-53-52-43-00-00 1305 218.111.25.2 44-45-53-54-00-00 445 - - Normal 1 11/03/2004 19:00:27 11/03/2004 19:00:27 Block_all
19368 11/03/2004 19:01:37 Blocked 10 Incoming TCP 218.111.25.138 20-53-52-43-00-00 3830 218.111.25.2 44-45-53-54-00-00 135 - - Normal 3 11/03/2004 19:01:29 11/03/2004 19:01:38 Block_all
19369 11/03/2004 19:01:37 Allowed 10 Outgoing TCP 210.150.253.178 20-53-52-43-00-00 80 218.111.25.2 44-45-53-54-00-00 1184 C:\Program Files\Internet Explorer\IEXPLORE.EXE - - Normal 1 11/03/2004 19:00:33 11/03/2004 19:00:33 Ask all running apps
19370 11/03/2004 19:01:48 Blocked 10 Incoming TCP 218.111.24.16 20-53-52-43-00-00 4620 218.111.25.2 44-45-53-54-00-00 445 - - Normal 2 11/03/2004 19:00:43 11/03/2004 19:00:46 Block_all
19371 11/03/2004 19:01:52 Allowed 10 Outgoing TCP 210.150.253.178 20-53-52-43-00-00 80 218.111.25.2 44-45-53-54-00-00 1185 C:\Program Files\Internet Explorer\IEXPLORE.EXE - - Normal 1 11/03/2004 19:01:04 11/03/2004 19:01:04 Ask all running apps
19372 11/03/2004 19:01:52 Allowed 10 Outgoing TCP 210.150.253.178 20-53-52-43-00-00 80 218.111.25.2 44-45-53-54-00-00 1186 C:\Program Files\Internet Explorer\IEXPLORE.EXE - - Normal 1 11/03/2004 19:01:35 11/03/2004 19:01:35 Ask all running apps
19373 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.182.134 20-53-52-43-00-00 4644 218.111.25.2 44-45-53-54-00-00 139 C:\WINDOWS\SYSTEM\kernel32.dll - - Normal 2 11/03/2004 19:01:49 11/03/2004 19:01:51 GUI%GUICONFIG#SRULE@NBBLOCK#BLOCK-TCP
19374 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.26.20 20-53-52-43-00-00 1650 218.111.25.2 44-45-53-54-00-00 445 - - Normal 2 11/03/2004 19:01:07 11/03/2004 19:01:10 Block_all
19375 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.25.138 20-53-52-43-00-00 4897 218.111.25.2 44-45-53-54-00-00 445 - - Normal 3 11/03/2004 19:00:45 11/03/2004 19:00:54 Block_all
19376 11/03/2004 19:01:52 Blocked 10 Incoming UDP 82.51.178.15 20-53-52-43-00-00 6346 218.111.25.2 44-45-53-54-00-00 6346 - - Normal 2 11/03/2004 19:01:07 11/03/2004 19:01:28 Block_all
19377 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.218.156 20-53-52-43-00-00 4764 218.111.25.2 44-45-53-54-00-00 445 - - Normal 2 11/03/2004 19:01:15 11/03/2004 19:01:18 Block_all
19378 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.25.138 20-53-52-43-00-00 2267 218.111.25.2 44-45-53-54-00-00 445 - - Normal 1 11/03/2004 19:01:51 11/03/2004 19:01:51 Block_all
19379 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.25.138 20-53-52-43-00-00 4668 218.111.25.2 44-45-53-54-00-00 135 - - Normal 3 11/03/2004 19:00:45 11/03/2004 19:00:54 Block_all
19380 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.25.138 20-53-52-43-00-00 4708 218.111.25.2 44-45-53-54-00-00 135 - - Normal 1 11/03/2004 19:01:51 11/03/2004 19:01:51 Block_all
19381 11/03/2004 19:01:52 Blocked 10 Incoming TCP 218.111.24.16 20-53-52-43-00-00 3299 218.111.25.2 44-45-53-54-00-00 445 - - Normal 2 11/03/2004 19:01:49 11/03/2004 19:01:52 Block_all
各位大大救命呀~~~ |
|
|
|
|
|
|
|
![](static/image/common/ico_lz.png)
楼主 |
发表于 4-11-2004 11:26 PM
|
显示全部楼层
没人救我吗?我水平有限呀~~
对方一直尝试从TCP和UDP端口寻找漏洞,但是基本上已经被我的防火强挡着了,根据Log File来说,我的电脑基本上只有两个程序,那就是IEXPLORE.EXE和kernel.dll有文件尝试传送进来,而IE的文件基本正常,就是从80里面传送进来的资料,而尝试连接kernel.dll的就从不同端口进来,其中一个是139。而对方也尝试寻找我的UDP是否有漏动存在。至于所有尝试连接kernel.dll的都被挡了。
我的端口设定都是处于静默状态的,就是the port is silent in response to open-port requests。
但是由于那个人整天用程序自动扫描我的电脑网络端口,所以我来问问是不是有新的系统入侵方法发明了,不然怎么那么百折不挠呀。
我才疏学浅,各位大大救命呀~~ |
|
|
|
|
|
|
|
发表于 5-11-2004 03:26 PM
|
显示全部楼层
|
|
|
|
|
|
|
发表于 5-11-2004 08:11 PM
|
显示全部楼层
INTERNET上有很多这一类的事情发生。
最要紧的就是做好安全措施,
UPDATE你的WINDOWS,INSTALL防火壁和ANTIVIRUS。 |
|
|
|
|
|
|
|
![](static/image/common/ico_lz.png)
楼主 |
发表于 5-11-2004 10:54 PM
|
显示全部楼层
感谢二位大大的拯救。
由于互联网知识日新月异,我看他整天用自动扫描,并尝试坚听我的网络流动信息,所以来问问,看下有没有什么安全大漏洞又被发现了。现在安心了。
感激涕零呀~~~ |
|
|
|
|
|
|
| |
本周最热论坛帖子
|