有个 ip 192.121.86.94:80 一直在穷举扫描我的服务器，我该怎么办？

[leyle]

RT，扫描了几个小时了，

类似下面的记录，我该怎么办啊？

root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 1 myserverip:46488 192.121.86.94:80 SYN_SENT
tcp 0 1 myserverip:46485 192.121.86.94:80 LAST_ACK
tcp 0 1 myserverip:46487 192.121.86.94:80 SYN_SENT
tcp 0 0 myserverip:46486 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 1 1 myserverip:46487 192.121.86.94:80 LAST_ACK
tcp 0 170 myserverip:46492 192.121.86.94:80 ESTABLISHED
tcp 0 0 myserverip:46491 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 0 myserverip:46502 192.121.86.94:80 ESTABLISHED
tcp 0 0 myserverip:46499 192.121.86.94:80 ESTABLISHED
tcp 0 170 myserverip:46503 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 0 myserverip:46508 192.121.86.94:80 ESTABLISHED
tcp 0 0 myserverip:46507 192.121.86.94:80 ESTABLISHED
tcp 0 170 myserverip:46509 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 1 myserverip:46515 192.121.86.94:80 SYN_SENT
tcp 0 1 myserverip:46514 192.121.86.94:80 LAST_ACK
tcp 0 1 myserverip:46516 192.121.86.94:80 SYN_SENT
tcp 0 0 myserverip:46513 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 0 myserverip:46519 192.121.86.94:80 ESTABLISHED
tcp 0 0 myserverip:46520 192.121.86.94:80 ESTABLISHED
tcp 0 170 myserverip:46521 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 1 myserverip:46533 192.121.86.94:80 SYN_SENT
tcp 0 1 myserverip:46532 192.121.86.94:80 SYN_SENT
tcp 0 1 myserverip:46530 192.121.86.94:80 LAST_ACK
tcp 0 1 myserverip:46531 192.121.86.94:80 LAST_ACK
tcp 0 0 myserverip:46529 192.121.86.94:80 ESTABLISHED
root@xxx:~# netstat -an --ip | grep "192.121.86.94"
tcp 0 1 myserverip:46756 192.121.86.94:80 LAST_ACK
tcp 0 1 myserverip:46759 192.121.86.94:80 SYN_SENT
tcp 0 0 myserverip:46758 192.121.86.94:80 ESTABLISHED
tcp 0 0 myserverip:46757 192.121.86.94:80 ESTABLISHED

[niseter]

iptables 封了就是啊

[lanbing]

直接封C段

[Ever]

主被动关系反了, 是你在请求那个IP的http.

[leyle]

@Ever 是啊，我以为是“那个ip在不停的连接我不同的端口”，把我吓坏了，后面才发现，是我自己发起的请求，搞了个大乌龙，实质是我对这些一点都不懂，让你们笑话了啊。
谢谢你们的回答。

[Suanlatang]

ban了 就好了

[zxy]

楼上让ban的，网络认真学了么

[Suanlatang]

@zxy 抱歉。。只看标题 没看内容。。。