|
 | 作者: hyhzc [hyhzc]
 论坛用户 |
登录 |
| 我用的是宽频上网，这几个月来有两个IP不停地想进入我的机子，我只能看到他们的地址和用户名，但不知如何才能阻止，很烦人啊。 有谁能告诉我如何才能不让他们再烦我吗？ A computer in your Banned IP list at IP address 10.47.73.1 has attempted to access UDP port 137 on your computer. UDP port 137 is commonly used by the "NETBIOS Name" service or program. NetBIOS is used for Windows file sharing. It can be exploited to access files on your computer. A computer in your Banned IP list at IP address 10.47.73.1 has attempted to access UDP port 138 on your computer. UDP port 138 is commonly used by the "NETBIOS Datagram" service or program. NetBIOS is used for Windows file sharing. It can be exploited to access files on your computer. A computer in your Banned IP list at IP address 10.47.73.1 has attempted to access UDP port 1900 on your computer. UDP port 1900 is commonly used by the "SSDP" service or program. SSDP is used to provide remote installation services. The protocol was designed to simplify administration by allowing you to install a device on your LAN and and in turn have it install itself onto all computers on the LAN. The original implementation was flawed and exposed a security risk. A security patch was released for Windows ME, 2000 and XP to fix several serious issues. However, opening port 1900 to the Internet is generally not wise even with a patched system. If you are on a school LAN or share several systems, you may see three events per system every few minutes. This can be ignored. If you do not see three items from the same system (on average) then you may wish to report this as an attack. If you are receiving a large number of these events, we recommend that you consider changing your "When an Event is Detected" setting (Options: General) to "Flash the Tray Icon". If you need to open this port, it can be opened in the "System Services" tab. A computer in your Banned IP list at IP address 10.47.73.1 has attempted to access UDP port 1900 on your computer. UDP port 1900 is commonly used by the "SSDP" service or program. SSDP is used to provide remote installation services. The protocol was designed to simplify administration by allowing you to install a device on your LAN and and in turn have it install itself onto all computers on the LAN. The original implementation was flawed and exposed a security risk. A security patch was released for Windows ME, 2000 and XP to fix several serious issues. However, opening port 1900 to the Internet is generally not wise even with a patched system. If you are on a school LAN or share several systems, you may see three events per system every few minutes. This can be ignored. If you do not see three items from the same system (on average) then you may wish to report this as an attack. If you are receiving a large number of these events, we recommend that you consider changing your "When an Event is Detected" setting (Options: General) to "Flash the Tray Icon". If you need to open this port, it can be opened in the "System Services" tab. A computer in your Banned IP list at IP address 10.47.73.1 has attempted to access UDP port 3005 on your computer. UDP port 3005 is commonly used by the "Genius License Manager" service or program. A computer in your Banned IP list at NA-9ES5TZQJFB5N has attempted to access TCP port 1850 on your computer. TCP port 1850 is commonly used by the "GSI" service or program. A computer in your Banned IP list at NA-9ES5TZQJFB5N has attempted to access TCP port 1842 on your computer. TCP port 1842 is commonly used by the "netopia-vo4" service or program. A computer in your Banned IP list at NA-9ES5TZQJFB5N has attempted to access TCP port 1823 on your computer. TCP port 1823 is commonly used by the "Unisys Natural Language License Manager" service or program. 以上只是小部份信息，有哪位高人能帮我，不胜感激！！！！ |
| 地主 发表时间: 01/30 22:09 |
 | 回复: chkz [chkz] 论坛用户 |
登录 |
|
唯一能告诉你的就是：想进入你电脑的IP地址根本不存在的 不存在就是他还没被分配出来！比如是192.168.0.1 它和这个IP地址一样的属性！嘿嘿！ |
| B1层 发表时间: 01/31 00:01 |
| 回复: hyhzc [hyhzc] 论坛用户 |
登录 |
|
楼上的朋友，这个地址是有的，是局域网的地址，并且我用LOCKDOWN时看见过他和他的用户名，应没错的。 |
| B2层 发表时间: 01/31 11:20 |
| 回复: chkz [chkz] 论坛用户 |
登录 |
|
呵呵。。他和192.168.0.1是一样的属性.那192.168.0.1会是什么地址呢。 ：） |
| B3层 发表时间: 01/31 15:00 |
| 回复: chkz [chkz] 论坛用户 |
登录 |
|
还有你别说什么[宽频上网] 我这种菜鸟见了都不明白.都是问了高手才知道是ADSL上网和一个什么什么的 ：） 137端口 标识：netbios-ns 138端口 标识：netbios-dgm 1900端口[？？？？]-----[木马] 标识：SSDP service 3005端口--------------[木马] 标识：Genius License Manager 1805端口--------------[木马或其他] 标识：GSI 1842端口--------------[木马其他] 标识：netopia-vo4 1823端口--------------[木马其他] 标识：Unisys Natural Language License Manager ----------------这些端口都是你安装了某种或某几种软件而打开的---- 这位我告诉你。查看自己电脑的异常连接你用netstat这个命令看看[在上网的时候] 哎~~~~~我是菜鸟。上面的这些只是随便说说。请高手告诉我吧！ |
| B4层 发表时间: 01/31 15:24 |
|
20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写：NetDemon
粤ICP备05087286号
论坛: 菜鸟乐园 标题: 求助！请教一个问题