KIS7.0拦截下来的攻击....
90%以上都是10465端口的...
少数80端口的....
80端口我刚才关闭了...
10465怎么关闭?
--------------------------------------
防火墙 : 运行中...
------------------
检测到网络攻击: 126
最后攻击时间: 2007-12-16 11:54:34
弹出窗口: 1
广告横幅: 0
开始时间: 2007-12-16 11:02:32
持续时间: 01:17:20

网络攻击
--------
时间 攻击描述 来源 协议 本地端口
---- -------- ---- ---- --------
2007-12-16 11:35:16 Intrusion.Generic.TCP.Flags.Bad.Combine.attack 60.223.239.32 TCP 10465
2007-12-16 11:39:59 Intrusion.Generic.TCP.Flags.Bad.Combine.attack 221.2.231.238 TCP 80
2007-12-16 11:54:30 DoS.Generic.SYNFlood 222.85.84.59 TCP 80
2007-12-16 11:54:30 DoS.Generic.SYNFlood 222.51.214.60 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 124.156.3.64 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 202.102.187.229 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 218.24.233.162 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 123.114.32.55 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 58.251.34.254 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 59.69.66.66 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 139.222.244.27 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 58.182.149.126 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 59.78.37.62 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 58.17.37.33 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 221.204.246.28 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 125.34.89.83 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 60.28.152.7 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 58.240.200.127 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 58.245.190.19 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 218.29.204.72 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 60.17.106.97 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 61.168.14.240 TCP 10465
2007-12-16 11:54:30 DoS.Generic.SYNFlood 123.191.76.153 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.197.163.107 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 116.18.94.160 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 218.21.242.10 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 60.22.51.167 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 121.19.0.233 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 124.90.187.39 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 122.139.8.159 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.5.34.16 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.249.181.133 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.117.91.3 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 190.36.162.51 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 70.155.186.81 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.7.83.195 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 220.242.116.228 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 222.52.162.2 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 211.166.239.17 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 122.66.74.127 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 218.62.30.57 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.244.66.23 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.49.150.177 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 116.3.8.254 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 121.29.53.221 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.118.5.227 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 218.8.64.209 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.201.29.166 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 60.21.36.255 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 78.26.128.253 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.223.208.32 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 117.10.108.219 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.155.145.149 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.244.96.85 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 60.19.148.138 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.201.104.161 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.14.71.31 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 121.32.212.226 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.17.194.241 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 125.33.73.148 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.20.233.23 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.220.223.36 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 219.134.81.208 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 124.161.72.2 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 116.112.51.235 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 61.87.248.108 TCP 80
2007-12-16 11:54:31 DoS.Generic.SYNFlood 125.46.17.156 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 218.9.124.9 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 202.106.113.11 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 59.49.207.21 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.138.253.186 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 221.220.57.92 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 58.19.211.35 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 123.232.4.130 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 59.37.139.168 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 117.8.159.160 TCP 80
2007-12-16 11:54:31 DoS.Generic.SYNFlood 210.146.159.59 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 203.192.13.13 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 60.7.205.34 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 61.48.100.1 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 222.18.177.31 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 117.8.147.89 TCP 10465
2007-12-16 11:54:31 DoS.Generic.SYNFlood 60.28.137.160 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 221.207.94.57 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 121.28.198.178 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 221.205.47.86 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 121.42.163.161 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 38.99.101.132 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 218.27.69.132 TCP 80
2007-12-16 11:54:32 DoS.Generic.SYNFlood 123.8.147.24 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 123.138.248.254 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 221.6.245.170 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 60.50.52.239 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 58.17.41.114 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 221.8.2.131 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 123.52.135.47 TCP 10465
2007-12-16 11:54:32 DoS.Generic.SYNFlood 210.43.141.134 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.51.208.197 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 58.24.87.93 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.85.84.58 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 58.18.24.111 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.90.74.83 TCP 80
2007-12-16 11:54:33 DoS.Generic.SYNFlood 220.114.244.204 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.51.64.53 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 202.113.35.145 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 58.48.141.181 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 125.34.58.166 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 125.211.82.77 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 211.139.121.234 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 60.18.226.55 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 221.172.40.131 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.85.84.26 TCP 80
2007-12-16 11:54:33 DoS.Generic.SYNFlood 60.24.10.175 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 220.115.122.245 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 123.138.241.34 TCP 80
2007-12-16 11:54:33 DoS.Generic.SYNFlood 124.161.77.122 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 124.193.208.122 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 116.224.143.117 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 218.75.242.247 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 221.200.195.228 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 221.204.34.75 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 222.76.185.50 TCP 80
2007-12-16 11:54:33 DoS.Generic.SYNFlood 124.161.72.250 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 118.24.248.80 TCP 10465
2007-12-16 11:54:33 DoS.Generic.SYNFlood 58.244.67.157 TCP 10465
2007-12-16 11:54:34 DoS.Generic.SYNFlood 58.20.116.156 TCP 10465

被阻止访问的列表
----------------
时间 电脑
---- ----
2007-12-16 11:35:16 60.223.239.32
2007-12-16 11:39:59 221.2.231.238
2007-12-16 11:54:30 222.85.84.59
2007-12-16 11:54:30 222.51.214.60
2007-12-16 11:54:30 124.156.3.64
2007-12-16 11:54:30 202.102.187.229
2007-12-16 11:54:30 218.24.233.162
2007-12-16 11:54:30 123.114.32.55
2007-12-16 11:54:30 58.251.34.254
2007-12-16 11:54:30 59.69.66.66
2007-12-16 11:54:30 139.222.244.27
2007-12-16 11:54:30 58.182.149.126
2007-12-16 11:54:30 59.78.37.62
2007-12-16 11:54:30 58.17.37.33
2007-12-16 11:54:30 221.204.246.28
2007-12-16 11:54:30 125.34.89.83
2007-12-16 11:54:30 60.28.152.7
2007-12-16 11:54:30 58.240.200.127
2007-12-16 11:54:30 58.245.190.19
2007-12-16 11:54:30 218.29.204.72
2007-12-16 11:54:30 60.17.106.97
2007-12-16 11:54:33 61.168.14.240
2007-12-16 11:54:30 123.191.76.153
2007-12-16 11:54:31 221.197.163.107
2007-12-16 11:54:31 116.18.94.160
2007-12-16 11:54:31 218.21.242.10
2007-12-16 11:54:31 60.22.51.167
2007-12-16 11:54:31 121.19.0.233
2007-12-16 11:54:31 124.90.187.39
2007-12-16 11:54:31 122.139.8.159
2007-12-16 11:54:31 123.5.34.16
2007-12-16 11:54:31 123.249.181.133
2007-12-16 11:54:31 123.117.91.3
2007-12-16 11:54:31 190.36.162.51
2007-12-16 11:54:31 70.155.186.81
2007-12-16 11:54:31 221.7.83.195
2007-12-16 11:54:31 220.242.116.228
2007-12-16 11:54:31 222.52.162.2
2007-12-16 11:54:31 211.166.239.17
2007-12-16 11:54:31 122.66.74.127
2007-12-16 11:54:31 218.62.30.57
2007-12-16 11:54:31 58.244.66.23
2007-12-16 11:54:31 58.49.150.177
2007-12-16 11:54:31 116.3.8.254
2007-12-16 11:54:31 121.29.53.221
2007-12-16 11:54:31 123.118.5.227
2007-12-16 11:54:31 218.8.64.209
2007-12-16 11:54:31 221.201.29.166
2007-12-16 11:54:31 60.21.36.255
2007-12-16 11:54:33 78.26.128.253
2007-12-16 11:54:31 221.223.208.32
2007-12-16 11:54:31 117.10.108.219
2007-12-16 11:54:31 123.155.145.149
2007-12-16 11:54:31 58.244.96.85
2007-12-16 11:54:31 60.19.148.138
2007-12-16 11:54:31 221.201.104.161
2007-12-16 11:54:31 123.14.71.31
2007-12-16 11:54:31 121.32.212.226
2007-12-16 11:54:31 58.17.194.241
2007-12-16 11:54:31 125.33.73.148
2007-12-16 11:54:31 58.20.233.23
2007-12-16 11:54:31 221.220.223.36
2007-12-16 11:54:31 219.134.81.208
2007-12-16 11:54:31 124.161.72.2
2007-12-16 11:54:31 116.112.51.235
2007-12-16 11:54:31 61.87.248.108
2007-12-16 11:54:31 125.46.17.156
2007-12-16 11:54:31 218.9.124.9
2007-12-16 11:54:31 202.106.113.11
2007-12-16 11:54:31 59.49.207.21
2007-12-16 11:54:34 123.138.253.186
2007-12-16 11:54:31 221.220.57.92
2007-12-16 11:54:31 58.19.211.35
2007-12-16 11:54:31 123.232.4.130
2007-12-16 11:54:31 59.37.139.168
2007-12-16 11:54:31 117.8.159.160
2007-12-16 11:54:31 210.146.159.59
2007-12-16 11:54:31 203.192.13.13
2007-12-16 11:54:31 60.7.205.34
2007-12-16 11:54:31 61.48.100.1
2007-12-16 11:54:31 222.18.177.31
2007-12-16 11:54:31 117.8.147.89
2007-12-16 11:54:31 60.28.137.160
2007-12-16 11:54:32 221.207.94.57
2007-12-16 11:54:32 121.28.198.178
2007-12-16 11:54:32 221.205.47.86
2007-12-16 11:54:32 121.42.163.161
2007-12-16 11:54:32 38.99.101.132
2007-12-16 11:54:32 218.27.69.132
2007-12-16 11:54:32 123.8.147.24
2007-12-16 11:54:32 123.138.248.254
2007-12-16 11:54:32 221.6.245.170
2007-12-16 11:54:32 60.50.52.239
2007-12-16 11:54:32 58.17.41.114
2007-12-16 11:54:32 221.8.2.131
2007-12-16 11:54:32 123.52.135.47
2007-12-16 11:54:32 210.43.141.134
2007-12-16 11:54:33 222.51.208.197
2007-12-16 11:54:33 58.24.87.93
2007-12-16 11:54:33 222.85.84.58
2007-12-16 11:54:33 58.18.24.111
2007-12-16 11:54:33 222.90.74.83
2007-12-16 11:54:33 220.114.244.204
2007-12-16 11:54:33 222.51.64.53
2007-12-16 11:54:33 202.113.35.145
2007-12-16 11:54:33 58.48.141.181
2007-12-16 11:54:33 125.34.58.166
2007-12-16 11:54:33 125.211.82.77
2007-12-16 11:54:33 211.139.121.234
2007-12-16 11:54:33 60.18.226.55
2007-12-16 11:54:33 221.172.40.131
2007-12-16 11:54:33 222.85.84.26
2007-12-16 11:54:33 60.24.10.175
2007-12-16 11:54:33 220.115.122.245
2007-12-16 11:54:33 123.138.241.34
2007-12-16 11:54:33 124.161.77.122
2007-12-16 11:54:33 124.193.208.122
2007-12-16 11:54:33 116.224.143.117
2007-12-16 11:54:33 218.75.242.247
2007-12-16 11:54:33 221.200.195.228
2007-12-16 11:54:33 221.204.34.75
2007-12-16 11:54:33 222.76.185.50
2007-12-16 11:54:33 124.161.72.250
2007-12-16 11:54:33 118.24.248.80
2007-12-16 11:54:33 58.244.67.157
2007-12-16 11:54:34 58.20.116.156

洪水攻击。是被看上了还是利用bt下载之类的软件？
关闭端口没什么用，换个端口一样攻击。80端口关了能浏览网页？
断网重连一次看看还有没有攻击。下载软件暂时不要用，尤其是BT。

[ 本帖最后由 ZHIHUA 于 2007-12-16 11:45 编辑 ]

谢谢LS的- -
刚才确实是在用BT下火影来着....

你不是都已经拦截下来了么？这个动作就是“关闭”

LS这头像咋看....看多了才看出问题....暴汗
IP策略可以禁用端口访问...

我不是很懂……
但是 你关闭80端口扯淡些了吧。。
那个电脑不开着80端口
一般 种马 就是 135   1433   3389  这3个端口，网马先不算。
而且我不建议卡巴 nod32比较不错。个人喜欢。
之前我只用过6.0  7.0没试过的。
关于 10465
我记着在这范围内的都是临时端口……

引用:

原帖由 8perhaps 于 2007-12-19 21:04 发表
我不是很懂……
但是 你关闭80端口扯淡些了吧。。
那个电脑不开着80端口
一般 种马 就是 135   1433   3389  这3个端口，网马先不算。
而且我不建议卡巴 nod32比较不错。个人喜欢。
之前我只用过6.0  7.0没试过 ...

种马那个别忘了反弹木马的80端口

国内的都是反弹马
是…但是种了马以后

封了80 马就不能用了么？

想知道是不是这样……

引用:

原帖由 8perhaps 于 2007-12-23 01:53 发表
国内的都是反弹马
是…但是种了马以后

封了80 马就不能用了么？

想知道是不是这样……

问题是封了80就不能正常浏览网页了，有谁会这样做？

极端主义么…………

起码人家不能看我的电脑…………