level 11
今天我们服务器跑来一个北京的黑客,除了会扫描端口之外啥都不会,不像以前遇到的那个德国黑客,给我们老师发个email,还写了个后门程序
2010年01月28日 09点01分
1
level 9
只会扫描端口也能算黑客????
我怎么招还会点溢出攻击之类的
2010年01月29日 21点01分
5
level 1
且看这么一段记录,记录的是连接3389端口的:
2009-7-12 10:15:48 IP: 125.39.110.3 PORT: 4305
2009-7-12 14:21:04 IP: 124.207.174.49 PORT: 6000
2009-7-16 11:48:09 IP: 122.200.112.130 PORT: 6000
2009-7-17 16:10:57 IP: 61.130.247.71 PORT: 6000
2009-7-20 16:28:04 IP: 222.33.57.150 PORT: 6000
2009-7-23 15:02:18 IP: 222.240.157.82 PORT: 6000
2009-7-23 18:08:29 IP: 58.222.25.46 PORT: 6000
2009-7-25 12:54:49 IP: 58.17.255.169 PORT: 6000
2009-7-26 8:13:43 IP: 122.200.112.130 PORT: 6000
2009-7-27 20:38:00 IP: 122.200.112.130 PORT: 6000
2009-7-29 9:26:19 IP: 219.147.34.22 PORT: 6000
2009-7-31 20:28:57 IP: 60.210.179.6 PORT: 6000
2009-8-2 16:28:51 IP: 124.207.174.58 PORT: 6000
2009-8-3 23:50:46 IP: 118.123.13.148 PORT: 6000
2009-8-5 18:49:24 IP: 122.200.112.130 PORT: 6000
2009-8-9 23:30:00 IP: 58.18.170.134 PORT: 6000
2009-8-10 15:15:12 IP: 115.173.29.25 PORT: 4637
2009-8-11 23:08:08 IP: 69.65.52.240 PORT: 1550
2009-8-19 17:58:35 IP: 210.51.190.208 PORT: 6000
2009-8-21 22:04:43 IP: 124.89.91.242 PORT: 6000
2009-8-23 20:38:07 IP: 218.247.157.70 PORT: 6000
2009-8-24 4:16:46 IP: 83.208.59.128 PORT: 2953
2009-9-4 21:48:29 IP: 61.139.105.149 PORT: 6000
2009-9-15 0:57:58 IP: 218.202.62.19 PORT: 6000
2009-9-19 12:17:38 IP: 120.72.41.5 PORT: 6000
2009-9-24 22:32:30 IP: 120.8.91.26 PORT: 1068
2009-10-1 9:17:13 IP: 60.213.133.133 PORT: 6000
2009-10-2 20:32:34 IP: 222.188.10.201 PORT: 6000
2010年01月30日 00点01分
6
level 1
这是扫描对方的端口,算是半个蜜罐程序吧!
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:45:45 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
127.0.0.1 135 -> NULL
127.0.0.1 445 -> NULL
127.0.0.1 3389 -> NULL
Scan 127.0.0.1 Complete In 0 Hours 0 Minutes 11 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:45:56 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
127.0.0.1 135 -> NULL
127.0.0.1 445 -> NULL
Scan 127.0.0.1 Complete In 0 Hours 0 Minutes 11 Seconds. Found 4 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:49:49 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
127.0.0.1 135 -> NULL
127.0.0.1 3389 -> "hello kitty!"
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:49:57 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 445 -> NULL
Scan 127.0.0.1 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
2010年01月30日 01点01分
8
level 1
-------------------------------------------------------------------------------
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
127.0.0.1 135 -> NULL
127.0.0.1 3389 -> "hello kitty!"
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:50:5 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 445 -> NULL
Scan 127.0.0.1 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
127.0.0.1 135 -> NULL
127.0.0.1 3389 -> "hello kitty!"
-------------------------------------------------------------------------------
Performing Time: 7/11/2009 0:50:13 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
127.0.0.1 445 -> NULL
Scan 127.0.0.1 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
127.0.0.1 80 -> NULL
127.0.0.1 110 -> NULL
-------------------------------------------------------------------------------
Performing Time: 7/12/2009 10:15:49 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
125.39.110.3 80 -> NULL
125.39.110.3 110 -> NULL
Scan 125.39.110.3 Complete In 0 Hours 0 Minutes 12 Seconds. Found 2 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
2010年01月30日 01点01分
9
level 1
Performing Time: 7/12/2009 14:21:15 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
124.207.174.49 80 -> NULL
124.207.174.49 110 -> NULL
Scan 124.207.174.49 Complete In 0 Hours 0 Minutes 13 Seconds. Found 2 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/16/2009 11:48:12 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
122.200.112.130 25 -> "220 sagother.sgather.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready at Thu, 16 Jul 2009 11:47:44 +0800 "
122.200.112.130 21 -> "220 Microsoft FTP Service"
122.200.112.130 80 -> NULL
122.200.112.130 110 -> "+OK Microsoft Exchange Server 2003 POP3 服务器版本 6.5.6944.0 (sagother.sgather.com) 已就绪。"
122.200.112.130 3389 -> NULL
Scan 122.200.112.130 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/17/2009 16:10:57 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
61.130.247.71 21 -> "220 Microsoft FTP Service"
61.130.247.71 25 -> "220 ***************************************************************************************************"
61.130.247.71 80 -> NULL
61.130.247.71 110 -> NULL
61.130.247.71 3389 -> NULL
Scan 61.130.247.71 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/20/2009 16:28:4 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
2010年01月30日 01点01分
10
level 1
222.33.57.150 80 -> NULL
222.33.57.150 110 -> NULL
222.33.57.150 3389 -> NULL
Scan 222.33.57.150 Complete In 0 Hours 0 Minutes 11 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/23/2009 15:2:19 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
222.240.157.82 80 -> NULL
222.240.157.82 110 -> NULL
222.240.157.82 3389 -> NULL
Scan 222.240.157.82 Complete In 0 Hours 0 Minutes 12 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/23/2009 18:8:31 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
58.222.25.46 21 -> "220 Microsoft FTP Service"
58.222.25.46 110 -> NULL
58.222.25.46 80 -> NULL
Scan 58.222.25.46 Complete In 0 Hours 0 Minutes 11 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/25/2009 12:54:50 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
58.17.255.169 80 -> NULL
58.17.255.169 110 -> NULL
58.17.255.169 3389 -> NULL
Scan 58.17.255.169 Complete In 0 Hours 0 Minutes 12 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/26/2009 8:13:43 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
122.200.112.130 25 -> "220 sagother.sgather.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready at Sun, 26 Jul 2009 08:13:05 +0800 "
2010年01月30日 01点01分
11
level 1
122.200.112.130 21 -> "220 Microsoft FTP Service"
122.200.112.130 80 -> NULL
122.200.112.130 110 -> "+OK Microsoft Exchange Server 2003 POP3 服务器版本 6.5.6944.0 (sagother.sgather.com) 已就绪。"
122.200.112.130 3389 -> NULL
Scan 122.200.112.130 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/27/2009 20:38:0 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
122.200.112.130 21 -> "220 Microsoft FTP Service"
122.200.112.130 25 -> "220 sagother.sgather.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready at Mon, 27 Jul 2009 20:37:20 +0800 "
122.200.112.130 80 -> NULL
122.200.112.130 110 -> "+OK Microsoft Exchange Server 2003 POP3 服务器版本 6.5.6944.0 (sagother.sgather.com) 已就绪。"
122.200.112.130 3389 -> NULL
Scan 122.200.112.130 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/29/2009 9:26:20 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
219.147.34.22 21 -> "220 Welcome to LZL's FTP Server V3.9.1"
219.147.34.22 110 -> NULL
219.147.34.22 80 -> NULL
219.147.34.22 3389 -> NULL
Scan 219.147.34.22 Complete In 0 Hours 0 Minutes 10 Seconds. Found 4 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 7/31/2009 20:28:58 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
2010年01月30日 01点01分
12
level 1
60.210.179.6 3389 -> NULL
Scan 60.210.179.6 Complete In 0 Hours 0 Minutes 12 Seconds. Found 1 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/2/2009 16:28:51 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
Scan 124.207.174.58 Complete In 0 Hours 0 Minutes 12 Seconds. Found 0 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/3/2009 23:50:47 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
118.123.13.148 21 -> "220 FTP server ready."
118.123.13.148 80 -> NULL
118.123.13.148 3389 -> NULL
Scan 118.123.13.148 Complete In 0 Hours 0 Minutes 14 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/5/2009 18:49:24 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
122.200.112.130 25 -> "220 sagother.sgather.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 ready at Wed, 5 Aug 2009 18:48:34 +0800 "
122.200.112.130 21 -> "220 Microsoft FTP Service"
122.200.112.130 80 -> NULL
122.200.112.130 110 -> "+OK Microsoft Exchange Server 2003 POP3 服务器版本 6.5.6944.0 (sagother.sgather.com) 已就绪。"
122.200.112.130 3389 -> NULL
Scan 122.200.112.130 Complete In 0 Hours 0 Minutes 9 Seconds. Found 5 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/9/2009 23:30:1 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
2010年01月30日 01点01分
13
level 1
Performing Time: 8/21/2009 22:4:44 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
124.89.91.242 3389 -> NULL
Scan 124.89.91.242 Complete In 0 Hours 0 Minutes 12 Seconds. Found 1 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/23/2009 20:38:13 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
218.247.157.70 80 -> NULL
218.247.157.70 135 -> NULL
218.247.157.70 3389 -> NULL
Scan 218.247.157.70 Complete In 0 Hours 0 Minutes 12 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 8/24/2009 4:16:49 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
Scan 83.208.59.128 Complete In 0 Hours 0 Minutes 12 Seconds. Found 0 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 9/4/2009 21:48:29 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
61.139.105.149 21 -> NULL
61.139.105.149 80 -> NULL
61.139.105.149 3389 -> NULL
Scan 61.139.105.149 Complete In 0 Hours 0 Minutes 12 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Performing Time: 9/15/2009 0:57:59 --> Normal Scan: About To Scan 8 Ports Using 1 Thread
218.202.62.19 21 -> "220 Serv-U FTP Server v7.0 ready..."
218.202.62.19 80 -> NULL
218.202.62.19 3389 -> NULL
Scan 218.202.62.19 Complete In 0 Hours 0 Minutes 12 Seconds. Found 3 Open Ports
-------------------------------------------------------------------------------
2010年01月30日 01点01分
15
level 11
= =
不感兴趣,反正上面都是我算的数据,我都懒得整理,他们要是偷走能写篇论文,把我加第二作者就行
2010年01月30日 09点01分
16