2023年6月24日发(作者：)

《网络安全技术》课程实验--端口扫描与安全审计

《信息安全技术与应用》课程实验

实验二 端口扫描与安全审计

一、Nmap简介

1. 基本功能与目标端口状态说明

Nmap（Network Mapper）是开放源码的网络探测和端口扫描工具，具有主机发现、端口扫描、操作系统检测、服务和版本检测、逃避放火墙及入侵检测系统等功能。可从网站/nmap/下载不同操作系统版本的源代码和可执行程序，而且提供了详细的中文使用手册（/nmap/man/zh/）。

Nmap以表格形式输出扫描目标的端口号、协议、服务名称和状态，端口状态分别用开放（open）、关闭（closed）、已过滤（filtered）和未过滤（unfiltered）表示。其中“开放”表示应用程序正在该端口监听连接或分组；“关闭”表示没有应用程序在该端口监听；“已过滤”表示防火墙或其他过滤器封锁了该端口，Nmap无法知道该端口的状态；“未过滤”表示端口对Nmap探测有响应，但Nmap不能确定端口是开放还是关闭。Nmap有时也可能输出open|filtered或closed|filtered的状态组合，表示不能正确识别端口处于其中那一个状态。

2. 命令格式与帮助

Nmap命令格式：nmap [

Scan Type ...] [

Options ] {

target specification }

Nmap命令帮助：C:>nmap（不带命令参数运行nmap）

3. 常用扫描类型

（1）-sT (TCP connect() 端口扫描)；

（2）-sS (TCP SYN 同步扫描)；

（3）-sU (UDP端口扫描)；

（4）-sN (Null扫描 ) ；

（5）-sF 扫描 (FIN)

（6）-sP（Ping扫描）；

（7）-sX (Xmas扫描 )；

（8）-sA (TCP ACK扫描，探测端口是否被过滤，open和closed端口返回RST报文，表示unfiltered，否则为filtered）

（9）-sM (TCP Maimon扫描， Maimon发现BSD系统探测报文FIN-ACK，响应RST ) ；

（10）--scanflags (定制TCP标志位URG， ACK，PSH， RST，SYN，和FIN的任何组合设计扫描探测报文 )

（11）-sW (TCP窗口扫描) ；-sI (Idlescan盲扫描) ；-sO (IP协议扫描) 等，详细内容参考Nmap手册；

（12）未指定扫描类型，默认扫描类型为TCP SYN 同步扫描。

4. 命令参数选项

（1）主机发现参数（也称ping扫描，但与ping 命令发送ICMP不同）

-sL (列表扫描) 、-sP (Ping扫描) 、-P0 (无ping) 、-PS [portlist] (TCP SYN Ping) 、-PA

[portlist] (TCP ACK Ping) 、-PU [portlist] (UDP Ping) 、-PR (ARP Ping)等。

（2）端口说明参数

-p 仅扫描指定端口。

例如，-p22; -p1-65535; -p U:53,111,137,T:21-25,80,139,8080（其中U、T分别指定UDP和TCP端口）

（3）服务和版本探测参数

- 1 - 《网络安全技术》课程实验--端口扫描与安全审计

-sV (版本探测) 、-sR (RPC扫描)

（4）操作系统探测参数

nmap-os-fingerprints文件包含了 1500多个已知操作系统的指纹信息。

-O (操作系统检测) 、-A（同时启用操作系统和服务版本检测）

（5）输出格式参数

Nmap具有交互、标准、XML等5种不同输出格式，默认为交互式输出。

-v (详细输出)

5. 目标地址规范

Nmap支持多种目标地址规范，包括单个目标IP地址、主机名称和网络地址。例如：

（1）nmap -sP 192.168.7.8，对目标主机192.168.7.8 ping扫描；

（2）nmap -sT ，对目标主机进行TCP connect()扫描；

（3）nmap -v 192.168.10.0/24，扫描192.168.10.0至192.168.10.255之间的256台目标主机，其中输出参数-v表示显示详细信息verbose；

（4）nmap -v 10.0.0-255.1-254，扫描10.0.0.1至10.0.255.254之间的所有IP地址；

（5）nmap -v 0-255.0-255.13.37，扫描Internet所有以13.37结束的IP地址；

（6）nmap -v -iR 1000 -P0 -p 80，随机选择1000个目标主机扫描，其中-P0 表示无ping扫描。

随机地址扫描格式为-iR ，其中-iR表示随机地址扫描，num hosts表示随机地址数。

二、实验内容

1. 安装软件

注意事项：采用时将自动安装WinPcap分组捕获库，采用解压缩时需事先安装WinPcap 分组捕获库。

2. 局域网主机发现

列表扫描：nmap -sL 局域网地址

3. 扫描目标主机端口

连续扫描目标主机端口：nmap –r目标主机IP地址或名称

4. 服务和版本检测

目标主机服务和版本检测：nmap -sV目标主机IP地址或名称

5. 操作系统检测

目标主机操作系统检测：nmap -O目标主机IP地址或名称

6. 端口扫描组合应用

nmap -v -A

nmap -v -sP 192.168.0.0/16 10.0.0.0/8

nmap -v -iR 10000 -P0 -p 80

三、实验要求

由于Nmap扫描功能强大、命令参数众多，在有限时间内不可能对所有命令参数进行实验。但实验内容中列举的扫描命令必须完成，也可以任意选择其他命令参数进行实验。命令执行后将执行结果复制到实验报告表格中，并对命令执行结果进行解释。

实验记录：

2. 局域网主机发现

列表扫描：nmap -sL 局域网地址

C:Documents and SettingsAdministrator>nmap -sL 219.226.87.40-50

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:31 中国标准

- 2 - 《网络安全技术》课程实验--端口扫描与安全审计

时间

Host 219.226.87.40 not scanned

Host 219.226.87.41 not scanned

Host 219.226.87.42 not scanned

Host 219.226.87.43 not scanned

Host 219.226.87.44 not scanned

Host 219.226.87.45 not scanned

Host 219.226.87.46 not scanned

Host 219.226.87.47 not scanned

Host 219.226.87.48 not scanned

Host 219.226.87.49 not scanned

Host 219.226.87.50 not scanned

Nmap finished: 11 IP addresses (0 hosts up) scanned in 13.078 seconds

3. 扫描目标主机端口

连续扫描目标主机端口：nmap –r目标主机IP地址或名称

C:Documents and SettingsAdministrator>nmap -r 219.226.87.56

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:29 中国标准

时间

Interesting ports on 219.226.87.56:

(The 1667 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE

80/tcp open http

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

7000/tcp open afs3-fileserver

MAC Address: 00:E0:4C:E9:5E:19 (Realtek Semiconductor)

Nmap finished: 1 IP address (1 host up) scanned in 0.734 seconds

4. 服务和版本检测

C:Documents and SettingsAdministrator>nmap -sV 219.226.87.56

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:26 中国标准

时间

Interesting ports on 219.226.87.56:

(The 1667 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE VERSION

80/tcp open http?

135/tcp open msrpc Microsoft Windows RPC

139/tcp open netbios-ssn

445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds

7000/tcp open afs3-fileserver?

MAC Address: 00:E0:4C:E9:5E:19 (Realtek Semiconductor)

- 3 - 《网络安全技术》课程实验--端口扫描与安全审计

Service Info: OS: Windows

Nmap finished: 1 IP address (1 host up) scanned in 124.969 seconds

5. 操作系统检测

目标主机操作系统检测：nmap -O目标主机IP地址或名称

C:Documents and SettingsAdministrator>nmap -O 219.226.87.56

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:25 中国标准

时间

Interesting ports on 219.226.87.56:

(The 1667 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE

80/tcp open http

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

7000/tcp open afs3-fileserver

MAC Address: 00:E0:4C:E9:5E:19 (Realtek Semiconductor)

Device type: general purpose

Running: Microsoft Windows NT/2K/XP

OS details: Microsoft Windows XP Pro SP1/SP2 or 2000 SP4

Nmap finished: 1 IP address (1 host up) scanned in 4.047 seconds

6. 端口扫描组合应用

nmap -v -A

C:Documents and SettingsAdministrator>nmap -v -A 219.226.87.56

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:22 中国标准

时间

Initiating ARP Ping Scan against 219.226.87.56 [1 port] at 17:22

The ARP Ping Scan took 0.22s to scan 1 total hosts.

DNS resolution of 1 IPs took 0.01s. Mode: Async [#: 2, OK: 0, NX: 1, DR: 0, SF:

0, TR: 1, CN: 0]

Initiating SYN Stealth Scan against 219.226.87.56 [1672 ports] at 17:22

Discovered open port 80/tcp on 219.226.87.56

Discovered open port 7000/tcp on 219.226.87.56

Discovered open port 139/tcp on 219.226.87.56

Discovered open port 445/tcp on 219.226.87.56

Discovered open port 135/tcp on 219.226.87.56

The SYN Stealth Scan took 0.19s to scan 1672 total ports.

Initiating service scan against 5 services on 219.226.87.56 at 17:22

The service scan took 88.56s to scan 5 services on 1 host.

For OSScan assuming port 80 is open, 1 is closed, and neither are firewalled

Host 219.226.87.56 appears to be up ... good.

- 4 - 《网络安全技术》课程实验--端口扫描与安全审计

Interesting ports on 219.226.87.56:

(The 1667 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE VERSION

80/tcp open http?

135/tcp open msrpc Microsoft Windows RPC

139/tcp open netbios-ssn

445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds

7000/tcp open afs3-fileserver?

MAC Address: 00:E0:4C:E9:5E:19 (Realtek Semiconductor)

Device type: general purpose

Running: Microsoft Windows NT/2K/XP

OS details: Microsoft Windows XP Pro SP1/SP2 or 2000 SP4

TCP Sequence Prediction: Class=truly random

Difficulty=9999999 (Good luck!)

IPID Sequence Generation: Incremental

Service Info: OS: Windows

Nmap finished: 1 IP address (1 host up) scanned in 90.156 seconds

Raw packets sent: 1687 (74.7KB) | Rcvd: 1687 (77.7KB)

nmap -v -sP 192.168.0.0/16 10.0.0.0/8

C:Documents and SettingsAdministrator>nmap -v -sP 219.226.87.50/24

Starting Nmap 4.01 ( /nmap ) at 2008-05-27 17:20 中国标准

时间

Initiating ARP Ping Scan against 65 hosts [1 port/host] at 17:20

The ARP Ping Scan took 0.53s to scan 65 total hosts.

DNS resolution of 35 IPs took 13.09s. Mode: Async [#: 2, OK: 0, NX: 25, DR: 10,

SF: 0, TR: 97, CN: 0]

Host 219.226.87.0 appears to be down.

Host 219.226.87.1 appears to be up.

MAC Address: 00:0F:E2:12:CA:0B (Hangzhou Huawei-3Com Tech. Co.)

Host 219.226.87.2 appears to be up.

MAC Address: 00:08:02:F7:81:6F (Compaq Computer)

Host 219.226.87.3 appears to be up.

MAC Address: 00:11:43:5B:2C:29 (Dell)

Host 219.226.87.4 appears to be up.

MAC Address: 00:11:D8:A2:0D:11 (Asustek Computer)

Host 219.226.87.5 appears to be down.

Host 219.226.87.6 appears to be down.

Host 219.226.87.7 appears to be down.

Host 219.226.87.8 appears to be down.

Host 219.226.87.9 appears to be down.

Host 219.226.87.10 appears to be down.

Host 219.226.87.11 appears to be up.

- 5 - 《网络安全技术》课程实验--端口扫描与安全审计

MAC Address: 00:E0:4C:F1:77:42 (Realtek Semiconductor)

Host 219.226.87.12 appears to be down.

Host 219.226.87.13 appears to be down.

Host 219.226.87.14 appears to be down.

Host 219.226.87.15 appears to be down.

Host 219.226.87.16 appears to be down.

Host 219.226.87.17 appears to be up.

MAC Address: 00:E0:4C:F1:76:95 (Realtek Semiconductor)

Host 219.226.87.18 appears to be up.

MAC Address: 00:E0:4C:E9:5E:65 (Realtek Semiconductor)

Host 219.226.87.19 appears to be down.

Host 219.226.87.20 appears to be up.

MAC Address: 00:E0:4C:F1:76:88 (Realtek Semiconductor)

Host 219.226.87.21 appears to be up.

MAC Address: 00:E0:4C:E9:5E:5A (Realtek Semiconductor)

Host 219.226.87.22 appears to be up.

MAC Address: 00:E0:4C:E9:5D:B5 (Realtek Semiconductor)

Host 219.226.87.23 appears to be down.

Host 219.226.87.24 appears to be up.

MAC Address: 00:E0:4C:E9:5E:63 (Realtek Semiconductor)

Host 219.226.87.25 appears to be down.

Host 219.226.87.26 appears to be down.

Host 219.226.87.27 appears to be up.

MAC Address: 00:E0:4C:F1:76:91 (Realtek Semiconductor)

Host 219.226.87.28 appears to be up.

MAC Address: 00:E0:4C:E9:5E:42 (Realtek Semiconductor)

Host 219.226.87.29 appears to be up.

MAC Address: 00:E0:4C:E9:5E:4B (Realtek Semiconductor)

Host 219.226.87.30 appears to be up.

MAC Address: 00:E0:4C:E9:5D:FB (Realtek Semiconductor)

Host 219.226.87.31 appears to be up.

MAC Address: 00:E0:4C:F1:76:BC (Realtek Semiconductor)

Host 219.226.87.32 appears to be up.

MAC Address: 00:E0:4C:E9:5D:CF (Realtek Semiconductor)

Host 219.226.87.33 appears to be up.

MAC Address: 00:E0:4C:F1:76:84 (Realtek Semiconductor)

Host 219.226.87.34 appears to be up.

MAC Address: 00:E0:4C:E9:5E:76 (Realtek Semiconductor)

Host 219.226.87.35 appears to be down.

Host 219.226.87.36 appears to be down.

Host 219.226.87.37 appears to be down.

Host 219.226.87.38 appears to be down.

Host 219.226.87.39 appears to be up.

MAC Address: 00:E0:4C:E9:5E:88 (Realtek Semiconductor)

- 6 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 219.226.87.40 appears to be up.

MAC Address: 00:E0:4C:F1:77:3B (Realtek Semiconductor)

Host 219.226.87.41 appears to be down.

Host 219.226.87.42 appears to be down.

Host 219.226.87.43 appears to be down.

Host 219.226.87.44 appears to be down.

Host 219.226.87.45 appears to be down.

Host 219.226.87.46 appears to be down.

Host 219.226.87.47 appears to be down.

Host 219.226.87.48 appears to be up.

MAC Address: 00:E0:4C:E9:5E:6D (Realtek Semiconductor)

Host 219.226.87.49 appears to be down.

Host 219.226.87.50 appears to be up.

MAC Address: 00:E0:4C:F1:76:D4 (Realtek Semiconductor)

Host 219.226.87.51 appears to be up.

MAC Address: 00:E0:4C:F1:77:38 (Realtek Semiconductor)

Host 219.226.87.52 appears to be up.

MAC Address: 00:E0:4C:E9:5D:C0 (Realtek Semiconductor)

Host 219.226.87.53 appears to be up.

MAC Address: 00:E0:4C:E9:5D:D5 (Realtek Semiconductor)

Host 219.226.87.54 appears to be down.

Host 219.226.87.55 appears to be up.

MAC Address: 00:E0:4C:E9:5E:75 (Realtek Semiconductor)

Host 219.226.87.56 appears to be up.

MAC Address: 00:E0:4C:E9:5E:19 (Realtek Semiconductor)

Host 219.226.87.57 appears to be up.

MAC Address: 00:E0:4C:F1:77:14 (Realtek Semiconductor)

Host 219.226.87.58 appears to be up.

MAC Address: 00:E0:4C:F1:76:C5 (Realtek Semiconductor)

Host 219.226.87.59 appears to be down.

Host 219.226.87.60 appears to be up.

MAC Address: 00:E0:4C:E9:5E:5B (Realtek Semiconductor)

Host 219.226.87.61 appears to be up.

MAC Address: 00:E0:4C:F1:76:F3 (Realtek Semiconductor)

Host 219.226.87.62 appears to be up.

MAC Address: 00:E0:4C:F3:20:C4 (Realtek Semiconductor)

Host 219.226.87.63 appears to be up.

MAC Address: 00:E0:4C:F1:77:43 (Realtek Semiconductor)

Host 219.226.87.64 appears to be up.

MAC Address: 00:E0:4C:F1:76:89 (Realtek Semiconductor)

DNS resolution of 1 IPs took 0.02s. Mode: Async [#: 2, OK: 0, NX: 1, DR: 0, SF:

0, TR: 1, CN: 0]

Host 219.226.87.65 appears to be up.

Initiating ARP Ping Scan against 62 hosts [1 port/host] at 17:20

- 7 - 《网络安全技术》课程实验--端口扫描与安全审计

The ARP Ping Scan took 0.59s to scan 62 total hosts.

DNS resolution of 15 IPs took 13.00s. Mode: Async [#: 2, OK: 0, NX: 13, DR: 2, S

F: 0, TR: 39, CN: 0]

Host 219.226.87.66 appears to be up.

MAC Address: 00:E0:4C:E9:5E:44 (Realtek Semiconductor)

Host 219.226.87.67 appears to be down.

Host 219.226.87.68 appears to be up.

MAC Address: 00:E0:4C:F1:77:21 (Realtek Semiconductor)

Host 219.226.87.69 appears to be up.

MAC Address: 00:E0:4C:F1:76:B0 (Realtek Semiconductor)

Host 219.226.87.70 appears to be up.

MAC Address: 00:E0:4C:E9:5E:55 (Realtek Semiconductor)

Host 219.226.87.71 appears to be down.

Host 219.226.87.72 appears to be up.

MAC Address: 00:E0:4C:F1:76:A9 (Realtek Semiconductor)

Host 219.226.87.73 appears to be up.

MAC Address: 00:E0:4C:E9:5E:64 (Realtek Semiconductor)

Host 219.226.87.74 appears to be up.

MAC Address: 00:E0:4C:F1:76:A4 (Realtek Semiconductor)

Host 219.226.87.75 appears to be up.

MAC Address: 00:E0:4C:F1:77:0C (Realtek Semiconductor)

Host 219.226.87.76 appears to be up.

MAC Address: 00:E0:4C:E9:5E:56 (Realtek Semiconductor)

Host 219.226.87.77 appears to be up.

MAC Address: 00:E0:4C:E9:5D:C3 (Realtek Semiconductor)

Host 219.226.87.78 appears to be up.

MAC Address: 00:E0:4C:E9:5D:D0 (Realtek Semiconductor)

Host 219.226.87.79 appears to be up.

MAC Address: 00:E0:4C:E9:5E:6B (Realtek Semiconductor)

Host 219.226.87.80 appears to be up.

MAC Address: 00:E0:4C:F1:76:86 (Realtek Semiconductor)

Host 219.226.87.81 appears to be down.

Host 219.226.87.82 appears to be down.

Host 219.226.87.83 appears to be down.

Host 219.226.87.84 appears to be down.

Host 219.226.87.85 appears to be down.

Host 219.226.87.86 appears to be down.

Host 219.226.87.87 appears to be down.

Host 219.226.87.88 appears to be down.

Host 219.226.87.89 appears to be down.

Host 219.226.87.90 appears to be down.

Host 219.226.87.91 appears to be down.

Host 219.226.87.92 appears to be down.

Host 219.226.87.93 appears to be down.

- 8 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 219.226.87.94 appears to be down.

Host 219.226.87.95 appears to be down.

Host 219.226.87.96 appears to be down.

Host 219.226.87.97 appears to be down.

Host 219.226.87.98 appears to be down.

Host 219.226.87.99 appears to be down.

Host 219.226.87.100 appears to be up.

MAC Address: 00:09:3D:00:7E:BC (Newisys)

Host 219.226.87.101 appears to be down.

Host 219.226.87.102 appears to be up.

MAC Address: 00:09:3D:00:7E:BC (Newisys)

Host 219.226.87.103 appears to be down.

Host 219.226.87.104 appears to be down.

Host 219.226.87.105 appears to be down.

Host 219.226.87.106 appears to be down.

Host 219.226.87.107 appears to be down.

Host 219.226.87.108 appears to be down.

Host 219.226.87.109 appears to be down.

Host 219.226.87.110 appears to be down.

Host 219.226.87.111 appears to be down.

Host 219.226.87.112 appears to be down.

Host 219.226.87.113 appears to be down.

Host 219.226.87.114 appears to be down.

Host 219.226.87.115 appears to be down.

Host 219.226.87.116 appears to be down.

Host 219.226.87.117 appears to be down.

Host 219.226.87.118 appears to be down.

Host 219.226.87.119 appears to be down.

Host 219.226.87.120 appears to be down.

Host 219.226.87.121 appears to be down.

Host 219.226.87.122 appears to be down.

Host 219.226.87.123 appears to be down.

Host 219.226.87.124 appears to be down.

Host 219.226.87.125 appears to be down.

Host 219.226.87.126 appears to be down.

Host 219.226.87.127 appears to be down.

DNS resolution of 0 IPs took 0.00s. Mode: Async [#: 2, OK: 0, NX: 0, DR: 0, SF:

0, TR: 0, CN: 0]

Host 219.226.87.128 appears to be down.

Host 219.226.87.129 appears to be down.

Host 219.226.87.130 appears to be down.

Host 219.226.87.131 appears to be down.

Host 219.226.87.132 appears to be down.

Host 219.226.87.133 appears to be down.

- 9 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 219.226.87.134 appears to be down.

Host 219.226.87.135 appears to be down.

Host 219.226.87.136 appears to be down.

Host 219.226.87.137 appears to be down.

Host 219.226.87.138 appears to be down.

Host 219.226.87.139 appears to be down.

Host 219.226.87.140 appears to be down.

Host 219.226.87.141 appears to be down.

Host 219.226.87.142 appears to be down.

Host 219.226.87.143 appears to be down.

Host 219.226.87.144 appears to be down.

Host 219.226.87.145 appears to be down.

Host 219.226.87.146 appears to be down.

Host 219.226.87.147 appears to be down.

Host 219.226.87.148 appears to be down.

Host 219.226.87.149 appears to be down.

Host 219.226.87.150 appears to be down.

Host 219.226.87.151 appears to be down.

Host 219.226.87.152 appears to be down.

Host 219.226.87.153 appears to be down.

Host 219.226.87.154 appears to be down.

Host 219.226.87.155 appears to be down.

Host 219.226.87.156 appears to be down.

Host 219.226.87.157 appears to be down.

Host 219.226.87.158 appears to be down.

Host 219.226.87.159 appears to be down.

Host 219.226.87.160 appears to be down.

Host 219.226.87.161 appears to be down.

Host 219.226.87.162 appears to be down.

Host 219.226.87.163 appears to be down.

Host 219.226.87.164 appears to be down.

Host 219.226.87.165 appears to be down.

Host 219.226.87.166 appears to be down.

Host 219.226.87.167 appears to be down.

Host 219.226.87.168 appears to be down.

Host 219.226.87.169 appears to be down.

Host 219.226.87.170 appears to be down.

Host 219.226.87.171 appears to be down.

Host 219.226.87.172 appears to be down.

Host 219.226.87.173 appears to be down.

Host 219.226.87.174 appears to be down.

Host 219.226.87.175 appears to be down.

Host 219.226.87.176 appears to be down.

Host 219.226.87.177 appears to be down.

- 10 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 219.226.87.178 appears to be down.

Host 219.226.87.179 appears to be down.

Host 219.226.87.180 appears to be down.

Host 219.226.87.181 appears to be down.

Host 219.226.87.182 appears to be down.

Host 219.226.87.183 appears to be down.

Host 219.226.87.184 appears to be down.

Host 219.226.87.185 appears to be down.

Host 219.226.87.186 appears to be down.

Host 219.226.87.187 appears to be down.

Host 219.226.87.188 appears to be down.

Host 219.226.87.189 appears to be down.

Host 219.226.87.190 appears to be down.

Host 219.226.87.191 appears to be down.

Host 219.226.87.192 appears to be down.

Host 219.226.87.193 appears to be down.

Host 219.226.87.194 appears to be down.

Host 219.226.87.195 appears to be down.

Host 219.226.87.196 appears to be down.

Host 219.226.87.197 appears to be down.

Host 219.226.87.198 appears to be down.

Host 219.226.87.199 appears to be down.

Host 219.226.87.200 appears to be down.

Host 219.226.87.201 appears to be down.

Host 219.226.87.202 appears to be down.

Host 219.226.87.203 appears to be down.

Host 219.226.87.204 appears to be down.

Host 219.226.87.205 appears to be down.

Host 219.226.87.206 appears to be down.

Host 219.226.87.207 appears to be down.

Host 219.226.87.208 appears to be down.

Host 219.226.87.209 appears to be down.

Host 219.226.87.210 appears to be down.

Host 219.226.87.211 appears to be down.

Host 219.226.87.212 appears to be down.

Host 219.226.87.213 appears to be down.

Host 219.226.87.214 appears to be down.

Host 219.226.87.215 appears to be down.

Host 219.226.87.216 appears to be down.

Host 219.226.87.217 appears to be down.

Host 219.226.87.218 appears to be down.

Host 219.226.87.219 appears to be down.

Host 219.226.87.220 appears to be down.

Host 219.226.87.221 appears to be down.

- 11 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 219.226.87.222 appears to be down.

Host 219.226.87.223 appears to be down.

Host 219.226.87.224 appears to be down.

Host 219.226.87.225 appears to be down.

Host 219.226.87.226 appears to be down.

Host 219.226.87.227 appears to be down.

Host 219.226.87.228 appears to be down.

Host 219.226.87.229 appears to be down.

Host 219.226.87.230 appears to be down.

Host 219.226.87.231 appears to be down.

Host 219.226.87.232 appears to be down.

Host 219.226.87.233 appears to be down.

Host 219.226.87.234 appears to be down.

Host 219.226.87.235 appears to be down.

Host 219.226.87.236 appears to be down.

Host 219.226.87.237 appears to be down.

Host 219.226.87.238 appears to be down.

Host 219.226.87.239 appears to be down.

Host 219.226.87.240 appears to be down.

Host 219.226.87.241 appears to be down.

Host 219.226.87.242 appears to be down.

Host 219.226.87.243 appears to be down.

Host 219.226.87.244 appears to be down.

Host 219.226.87.245 appears to be down.

Host 219.226.87.246 appears to be down.

Host 219.226.87.247 appears to be down.

Host 219.226.87.248 appears to be down.

Host 219.226.87.249 appears to be down.

Host 219.226.87.250 appears to be down.

Host 219.226.87.251 appears to be down.

Host 219.226.87.252 appears to be down.

Host 219.226.87.253 appears to be down.

Host 219.226.87.254 appears to be down.

nexthost: Failed to determine dst MAC address for target 219.226.87.255

QUITTING!

nmap -v -iR 10000 -P0 -p 80

C:Documents and SettingsAdministrator>nmap -v -iR 10 -P0 -p 80

Starting Nmap 4.01 ( /nmap ) at 2008-05-10 16:03 中国标准

时间

DNS resolution of 10 IPs took 13.02s. Mode: Async [#: 1, OK: 0, NX: 8, DR: 2, SF

: 0, TR: 14, CN: 0]

Initiating SYN Stealth Scan against 10 hosts [1 port/host] at 16:03

The SYN Stealth Scan took 2.17s to scan 10 total ports.

- 12 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 22.99.137.50 appears to be up ... good.

Interesting ports on 22.99.137.50:

PORT STATE SERVICE

80/tcp filtered http

Host 124.56.47.98 appears to be up ... good.

Interesting ports on 124.56.47.98:

PORT STATE SERVICE

80/tcp filtered http

Host 30.41.46.100 appears to be up ... good.

Interesting ports on 30.41.46.100:

PORT STATE SERVICE

80/tcp filtered http

Host 149.47.10.19 appears to be up ... good.

Interesting ports on 149.47.10.19:

PORT STATE SERVICE

80/tcp filtered http

Host 204.42.144.91 appears to be up ... good.

Interesting ports on 204.42.144.91:

PORT STATE SERVICE

80/tcp filtered http

Host 140.82.176.19 appears to be up ... good.

Interesting ports on 140.82.176.19:

PORT STATE SERVICE

80/tcp filtered http

Host 41.88.125.68 appears to be up ... good.

Interesting ports on 41.88.125.68:

PORT STATE SERVICE

80/tcp filtered http

Host 25.6.132.65 appears to be up ... good.

Interesting ports on 25.6.132.65:

PORT STATE SERVICE

80/tcp filtered http

Host 222.48.237.96 appears to be up ... good.

Interesting ports on 222.48.237.96:

PORT STATE SERVICE

80/tcp filtered http

- 13 - 《网络安全技术》课程实验--端口扫描与安全审计

Host 157.109.104.107 appears to be up ... good.

Interesting ports on 157.109.104.107:

PORT STATE SERVICE

80/tcp filtered http

Nmap finished: 10 IP addresses (10 hosts up) scanned in 15.281 seconds

Raw packets sent: 20 (880B) | Rcvd: 0 (0B)

- 14 -