SEGURIDAD INFORMATICA, Firewall, parches, vacunas, antivirus, anti troyanos, spyware etc > Seguridad Informatica - Firewall - Virus - Troyanos - Spyware - Ad Aware - Malware
Mi pc esta poseido?
eb_scrooge:
de entrada no le des muxas vueltas a los puertos extraños q esten abiertos q hay 4 o 5 a parte d los habituales q s lo q son.
Dabo:
bueno amigo, ademas de postearte algo del NMAP, he querido que lo veas graficamente para que lo comprendas mejor, fijate en todo lo que tienes compartido a traves de Netbios, mira los puertos abiertos y revisa los UDP que te pongo debajo, los del NMAP
creo que no tendras problemas para comprenderlo, hay que desactivar esos servicios, cerrar puertos, cambiar todas las contraseñas que tengas activas, en el PC , las que uses via web y cerrarlo todo bien con un firewall
aqui va la captura del SSS
Dabo:
connect scan nmap
Starting nmap V. 3.00 ( www.insecure.org/nmap )
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Insufficient responses for TCP sequencing (0), OS detection may be less accurate
Insufficient responses for TCP sequencing (0), OS detection may be less accurate
Insufficient responses for TCP sequencing (0), OS detection may be less accurate
Interesting ports on xxx.Red-80-xxxxx.pooles.rima-tde.net (80.xxxxx):
(The 1596 ports scanned but not shown below are in state: filtered)
Port State Service
25/tcp open smtp
110/tcp open pop-3
135/tcp open loc-srv
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SInfo(V=3.00%P=i686-pc-windows-windows%D=4/13%Time=407C5029%O=25%C=-1)
T1(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T2(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=)
T3(Res
p=Y%DF=N%W=0%ACK=O%Flags=AR%Ops=)
T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RIPCK=E%UCK=E%ULEN=134%DAT=E)
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
WARNING: RST from port 25 -- is this port really open?
Nmap run completed -- 1 IP address (1 host up) scanned in 655 seconds
-----------------------------------------------
udp scan
Starting nmap V. 3.00 ( www.insecure.org/nmap )
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Interesting ports on xxx.Red-80-xxxx.pooles.rima-tde.net (80.xxxx):
(The 1463 ports scanned but not shown below are in state: closed)
Port State Service
67/udp open dhcpserver
68/udp open dhcpclient
445/udp open microsoft-ds
500/udp open isakmp
4500/udp open sae-urn
Too many fingerprints match this host for me to give an accurate OS guess
Nmap run completed -- 1 IP address (1 host up) scanned in 26 seconds
------------------------------------------------------
saludos y ya me cuentas ok???
Leandros:
la cuenta invitado nunca me ha gustado. A la horca con ella jejejeje.
Si se puede preguntar, para que utilizas el netbios?
eb_scrooge:
weno, vayamos x partes. q es lo de null session? lo primero q m sorprende q aparezcan el 25 y 110 abiertos. de hexo juraria q no lo estan. referente al resto de servicios q puedo cerrar?de todos modos tras el firewall qdan protegidos, se supone... sobre netbios q era x lo q empezaba todo esto, estamos en las mismas, con el firewall qda cerrado a internet. xo el tema esta en esas conexiones salientes al puerto 137 q hace.
x lo de las contraseñas, pese a visualizar los recursos compartidos no habras podido acceder a ellos(pregunto)?
el netbios lo uso pa compartir arxivos en la lan. las veces q lo he desactivado he estado pasando los arxivos x ftp y con el total commander s hace mas o menos soportable xo es un palo.
pos eso, s m pasa algo?
plis. edita la sexta linea del log del nmap, la primera terna de numeros.
Navegación
[#] Página Siguiente
[*] Página Anterior
Ir a la versión completa