🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: pl.comp.security
Article #52230

Re: Pytanie o skan

#52230
From: Daniel
Date: Mon, 13 Sep 2004 10:53
135 lines
8763 bytes
Jacek napisał(a):

> w piatek wieczorem zauwazylem w logach freesco :
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:932 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:816 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:417 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:192 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:22321 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1900 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:414 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:761 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:771 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1442 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:6142 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:2605 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:556 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:371 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1430 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:18000 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:2047 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:32771 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:279 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1234 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:439 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:830 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:461 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1670 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:409 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:860 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:583 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:241 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:672 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:5000 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:285 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:870 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1464 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:473 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:5308 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:494 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1356 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:372 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:902 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:297 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1522 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:250 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:4343 "moj 
> ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243
> 
> albo to:
> Sep 10 20:40:31 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33431 F=0x0000 T=19
> Sep 10 20:40:33 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33436 F=0x0000 T=19
> Sep 10 20:40:33 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33437 F=0x0000 T=19
> Sep 10 20:40:35 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33439 F=0x0000 T=19
> Sep 10 20:40:35 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33440 F=0x0000 T=19
> Sep 10 20:40:37 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33442 F=0x0000 T=19
> Sep 10 20:40:37 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33443 F=0x0000 T=19
> Sep 10 20:40:39 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33447 F=0x0000 T=19
> Sep 10 20:40:39 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33448 F=0x0000 T=19
> Sep 10 20:40:41 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33454 F=0x0000 T=19
> Sep 10 20:40:41 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33455 F=0x0000 T=19
> Sep 10 20:40:43 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33464 F=0x0000 T=19
> Sep 10 20:40:43 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33465 F=0x0000 T=19
> Sep 10 20:40:45 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33468 F=0x0000 T=19
> Sep 10 20:40:45 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33469 F=0x0000 T=19
> Sep 10 20:40:47 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33471 F=0x0000 T=19
> Sep 10 20:40:47 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33472 F=0x0000 T=19
> Sep 10 20:40:49 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":48768 L=40 S=0x00 I=33474 F=0x0000 T=19
> Sep 10 20:40:49 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj 
> ip":1103 L=40 S=0x00 I=33475 F=0x0000 T=19
> 
> co gosc kombinowal ?
> 
> 
jak masz deny to nie masz sie czym martwic. a masz jakas usługe na tych 
portach ?
Technical Details
Message-ID: <ci3u5o$ak2$3@inews.gazeta.pl>
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!newsfeed.gazeta.pl!news.internetia.pl!newsfeed.tpinternet.pl!news.underley.eu.org!moderators!marcinw@medianet.pl
References: <ci3f3l$c7l$1@213.17.241.78>

Show Full Headers
Complete Article Headers
In-Reply-To: <ci3f3l$c7l$1@213.17.241.78>
Errors-To: pcs-bounce@underley.eu.org
X-Accept-Language: pl, en-us, en
X-Complaints-To: usenet@agora.pl
X-Trace: inews.gazeta.pl 1095072760 10882 195.117.161.254 (13 Sep 2004 10:52:40 GMT)
Approved: marcinw@medianet.pl
References: <ci3f3l$c7l$1@213.17.241.78>
Lines: 135
Message-ID: <ci3u5o$ak2$3@inews.gazeta.pl>
X-Orig-Path: not-for-mail
Organization: "Portal Gazeta.pl -> http://www.gazeta.pl"
Newsgroups: pl.comp.security
User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707)
Subject: Re: Pytanie o skan
X-NNTP-Posting-Host: firewall.ptf.pl
NNTP-Posting-Host: ghostwheel.underley.eu.org
NNTP-Posting-Date: Mon, 13 Sep 2004 10:52:40 +0000 (UTC)
X-Moder-Tool: moder-gate.pl, v2.1 2002/11/13 (c) Daniel Podlejski <underley@underley.eu.org>
Date: Mon, 13 Sep 2004 12:53:06 +0200
X-User: d-wasyl
Mime-Version: 1.0
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!newsfeed.gazeta.pl!news.internetia.pl!newsfeed.tpinternet.pl!news.underley.eu.org!moderators!marcinw@medianet.pl
X-Bogosity: No, tests=bogofilter, spamicity=0.000000, version=0.92.4
From: Daniel <d-wasyl@NO_SPAM.gazeta.pl>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit