我的服务器是不是有问题？

miling

运行ipmon -o S
有下面信息：

1. 06/04/2005 09:17:56.137435 STATE:NEW 202.96.x.x,1045 ->; 202.12.29.13,43 PR tcp
   
2. 06/04/2005 09:19:18.089969 STATE:NEW 202.96.x.x,2878 ->; 218.244.245.248,113 PR tcp
   
3. 06/04/2005 09:19:24.079895 STATE:NEW 202.96.x.x,1496 ->; 218.244.245.248,113 PR tcp
   
4. 06/04/2005 09:22:04.120024 STATE:CLOSE 202.96.x.x,1045 ->; 202.12.29.13,43 PR tcp Pkts 16 Bytes 2055
   
5. 06/04/2005 09:22:15.926752 STATE:NEW 202.96.x.x,2598 ->; 218.244.245.248,113 PR tcp
   
6. 06/04/2005 09:22:21.630562 STATE:NEW 202.96.x.x,4591 ->; 218.244.245.248,113 PR tcp
   
7. 06/04/2005 09:22:29.577877 STATE:NEW 202.96.x.x,4337 ->; 218.244.245.248,113 PR tcp
   
8. 06/04/2005 09:23:00.984063 STATE:NEW 202.96.x.x,4174 ->; 61.144.248.21,113 PR tcp
   
9. 06/04/2005 09:23:15.322506 STATE:NEW 202.96.x.x,3922 ->; 220.181.31.184,113 PR tcp
   
10. 06/04/2005 09:23:16.147702 STATE:NEW 202.96.x.x,4945 ->; 220.181.31.184,113 PR tcp
    
11. 06/04/2005 09:23:17.621165 STATE:EXPIRE 202.96.x.x,2878 ->; 218.244.245.248,113 PR tcp Pkts 2 Bytes 120
    
12. 06/04/2005 09:23:23.621257 STATE:EXPIRE 202.96.x.x,1496 ->; 218.244.245.248,113 PR tcp Pkts 2 Bytes 120
    
13. 06/04/2005 09:24:15.122037 STATE:EXPIRE 202.96.x.x,3922 ->; 220.181.31.184,113 PR tcp Pkts 2 Bytes 100
    
14. 06/04/2005 09:24:16.122052 STATE:EXPIRE 202.96.x.x,4945 ->; 220.181.31.184,113 PR tcp Pkts 2 Bytes 100
    
15. 06/04/2005 09:26:15.623888 STATE:EXPIRE 202.96.x.x,2598 ->; 218.244.245.248,113 PR tcp Pkts 2 Bytes 120
    
16. 06/04/2005 09:26:21.623980 STATE:EXPIRE 202.96.x.x,4591 ->; 218.244.245.248,113 PR tcp Pkts 2 Bytes 120
    
17. 06/04/2005 09:26:29.124119 STATE:EXPIRE 202.96.x.x,4337 ->; 218.244.245.248,113 PR tcp Pkts 2 Bytes 120
    
18. 06/04/2005 09:27:00.624589 STATE:EXPIRE 202.96.x.x,4174 ->; 61.144.248.21,113 PR tcp Pkts 2 Bytes 120
    

复制代码

miling

查了以下日志文件，似乎是在扫描我的机器

1. Apr  6 08:53:27 mail sm-mta[77342]: j360rEN9077342: <andrew@nlcd.com.cn>;... User unknown
   
2. Apr  6 08:53:33 mail sm-mta[77342]: j360rEN9077342: lost input channel from [218.244.245.248] to IPv4 after rcpt
   
3. Apr  6 08:53:33 mail sm-mta[77342]: j360rEN9077342: from=<zhuqiao1333@sina.com>;, size=0, class=0, nrcpts=0, proto=ESMTP, daemo
   
4. n=IPv4, relay=[218.244.245.248]
   
5. Apr  6 08:53:41 mail sm-mta[77343]: j360rdR6077343: <andrew@nlcd.com.cn>;... User unknown
   
6. Apr  6 08:53:44 mail sm-mta[77343]: j360rdR6077343: lost input channel from [218.244.245.248] to IPv4 after rcpt
   
7. Apr  6 08:53:44 mail sm-mta[77343]: j360rdR6077343: from=<zhuqiao1333@sina.com>;, size=0, class=0, nrcpts=0, proto=ESMTP, daemo
   
8. n=IPv4, relay=[218.244.245.248]
   

复制代码

lemony

我的服务器一天被人扫描N次～

没有关系的～～～～～～

如果你的服务器有http，那么需要多注意一下web日志，防止php注入～

一般要从服务器本身寻找漏洞是很困难的～

剑心通明

被扫描很正常的