Article View: pl.comp.security
Article #52230Re: Pytanie o skan
From: Daniel
Date: Mon, 13 Sep 2004 10:53
Date: Mon, 13 Sep 2004 10:53
135 lines
8763 bytes
8763 bytes
Jacek napisał(a): > w piatek wieczorem zauwazylem w logach freesco : > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:932 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:816 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:417 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:192 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:22321 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1900 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:414 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:761 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:771 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1442 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:6142 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:2605 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:556 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:371 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1430 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:18000 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:2047 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:32771 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:279 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1234 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:439 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:830 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:461 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1670 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:409 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:860 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:583 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:241 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:672 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:5000 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:285 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:870 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1464 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:473 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:5308 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:494 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1356 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:372 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:902 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:297 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:1522 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:250 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > Sep 10 22:30:09 - kernel: IP fw-in deny eth0 TCP 83.27.4.65:4343 "moj > ip":52084 L=40 S=0x00 I=0 F=0x4000 T=243 > > albo to: > Sep 10 20:40:31 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33431 F=0x0000 T=19 > Sep 10 20:40:33 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33436 F=0x0000 T=19 > Sep 10 20:40:33 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33437 F=0x0000 T=19 > Sep 10 20:40:35 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33439 F=0x0000 T=19 > Sep 10 20:40:35 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33440 F=0x0000 T=19 > Sep 10 20:40:37 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33442 F=0x0000 T=19 > Sep 10 20:40:37 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33443 F=0x0000 T=19 > Sep 10 20:40:39 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33447 F=0x0000 T=19 > Sep 10 20:40:39 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33448 F=0x0000 T=19 > Sep 10 20:40:41 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33454 F=0x0000 T=19 > Sep 10 20:40:41 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33455 F=0x0000 T=19 > Sep 10 20:40:43 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33464 F=0x0000 T=19 > Sep 10 20:40:43 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33465 F=0x0000 T=19 > Sep 10 20:40:45 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33468 F=0x0000 T=19 > Sep 10 20:40:45 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33469 F=0x0000 T=19 > Sep 10 20:40:47 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33471 F=0x0000 T=19 > Sep 10 20:40:47 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33472 F=0x0000 T=19 > Sep 10 20:40:49 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":48768 L=40 S=0x00 I=33474 F=0x0000 T=19 > Sep 10 20:40:49 - kernel: IP fw-in deny eth0 UDP 83.27.4.65:1636 "moj > ip":1103 L=40 S=0x00 I=33475 F=0x0000 T=19 > > co gosc kombinowal ? > > jak masz deny to nie masz sie czym martwic. a masz jakas usługe na tych portach ?
Technical Details
Message-ID:
<ci3u5o$ak2$3@inews.gazeta.pl>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!newsfeed.gazeta.pl!news.internetia.pl!newsfeed.tpinternet.pl!news.underley.eu.org!moderators!marcinw@medianet.plReferences:
<ci3f3l$c7l$1@213.17.241.78>Show Full Headers
Complete Article Headers
In-Reply-To: <ci3f3l$c7l$1@213.17.241.78> Errors-To: pcs-bounce@underley.eu.org X-Accept-Language: pl, en-us, en X-Complaints-To: usenet@agora.pl X-Trace: inews.gazeta.pl 1095072760 10882 195.117.161.254 (13 Sep 2004 10:52:40 GMT) Approved: marcinw@medianet.pl References: <ci3f3l$c7l$1@213.17.241.78> Lines: 135 Message-ID: <ci3u5o$ak2$3@inews.gazeta.pl> X-Orig-Path: not-for-mail Organization: "Portal Gazeta.pl -> http://www.gazeta.pl" Newsgroups: pl.comp.security User-Agent: Mozilla Thunderbird 0.7.2 (Windows/20040707) Subject: Re: Pytanie o skan X-NNTP-Posting-Host: firewall.ptf.pl NNTP-Posting-Host: ghostwheel.underley.eu.org NNTP-Posting-Date: Mon, 13 Sep 2004 10:52:40 +0000 (UTC) X-Moder-Tool: moder-gate.pl, v2.1 2002/11/13 (c) Daniel Podlejski <underley@underley.eu.org> Date: Mon, 13 Sep 2004 12:53:06 +0200 X-User: d-wasyl Mime-Version: 1.0 Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!newsfeed.gazeta.pl!news.internetia.pl!newsfeed.tpinternet.pl!news.underley.eu.org!moderators!marcinw@medianet.pl X-Bogosity: No, tests=bogofilter, spamicity=0.000000, version=0.92.4 From: Daniel <d-wasyl@NO_SPAM.gazeta.pl> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit