Visualizzazione dei risultati da 1 a 2 su 2
  1. #1
    Utente bannato
    Registrato dal
    Sep 2000
    Messaggi
    214

    [firewall] Outpost Log Text

    30/01/05 19.47.17 Port scanned 80.104.193.165 TCP(445)
    30/01/05 19.47.17 Connection request 80.104.193.165 TCP(445)
    30/01/05 19.47.07 Port scanned 219.153.10.140 TCP(25)
    30/01/05 19.47.07 Connection request 219.153.10.140 TCP(25)
    30/01/05 19.46.56 Port scanned 80.104.179.155 TCP(445)
    30/01/05 19.46.56 Connection request 80.104.179.155 TCP(445)
    30/01/05 19.46.38 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.45.59 Port scanned 80.104.31.73 TCP(135)
    30/01/05 19.45.59 Connection request 80.104.31.73 TCP(135)
    30/01/05 19.45.53 My address 127.0.0.1
    30/01/05 19.45.34 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.45.21 Port scanned 80.104.136.64 TCP(445)
    30/01/05 19.45.21 Connection request 80.104.136.64 TCP(445)
    30/01/05 19.45.15 Port scanned 80.104.252.41 TCP(445)
    30/01/05 19.45.15 Connection request 80.104.252.41 TCP(445)
    30/01/05 19.45.10 Port scanned 80.224.146.224 TCP(445)
    30/01/05 19.45.10 Connection request 80.224.146.224 TCP(445)
    30/01/05 19.44.45 Port scanned 80.104.161.24 TCP(445)
    30/01/05 19.44.45 Connection request 80.104.161.24 TCP(445)
    30/01/05 19.44.31 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.44.24 Port scanned 80.104.179.120 TCP(135)
    30/01/05 19.44.24 Connection request 80.104.179.120 TCP(135)
    30/01/05 19.44.18 Port scanned 80.104.155.43 TCP(445)
    30/01/05 19.44.18 Connection request 80.104.155.43 TCP(445)
    30/01/05 19.43.32 Port scanned 80.104.250.153 TCP(445)
    30/01/05 19.43.32 Connection request 80.104.250.153 TCP(445)
    30/01/05 19.43.26 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.42.44 Port scanned 80.104.239.30 TCP(135)
    30/01/05 19.42.44 Connection request 80.104.239.30 TCP(135)
    30/01/05 19.42.44 Port scanned 80.104.22.45 TCP(135)
    30/01/05 19.42.44 Connection request 80.104.22.45 TCP(135)
    30/01/05 19.42.43 Connection request 195.110.122.168 TCP(30756)
    30/01/05 19.42.30 Port scanned 80.104.31.110 TCP(445)
    30/01/05 19.42.30 Connection request 80.104.31.110 TCP(445)
    30/01/05 19.42.22 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.42.20 Port scanned 80.104.250.111 TCP(445)
    30/01/05 19.42.20 Connection request 80.104.250.111 TCP(445)
    30/01/05 19.42.07 Port scanned 80.104.196.183 TCP(135)
    30/01/05 19.42.07 Connection request 80.104.196.183 TCP(135)
    30/01/05 19.42.00 Port scanned 80.104.178.7 TCP(445)
    30/01/05 19.42.00 Connection request 80.104.178.7 TCP(445)
    30/01/05 19.41.53 Port scanned 80.104.217.110 TCP(445)
    30/01/05 19.41.53 Connection request 80.104.217.110 TCP(445)
    30/01/05 19.41.46 Port scanned 80.104.86.146 TCP(445)
    30/01/05 19.41.46 Connection request 80.104.86.146 TCP(445)
    30/01/05 19.41.18 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.40.57 Port scanned 80.104.165.224 TCP(445)
    30/01/05 19.40.57 Connection request 80.104.165.224 TCP(445)
    30/01/05 19.40.18 Port scanned 80.104.104.115 TCP(135)
    30/01/05 19.40.18 Connection request 80.104.104.115 TCP(135)
    30/01/05 19.40.14 Connection request 66.218.75.230 TCP(1066)
    30/01/05 19.40.10 Port scanned 80.104.179.123 TCP(445)
    30/01/05 19.40.10 Connection request 80.104.179.123 TCP(445)
    30/01/05 19.39.58 Port scanned 80.104.139.118 TCP(135)
    30/01/05 19.39.58 Connection request 80.104.139.118 TCP(135)
    30/01/05 19.37.20 Port scanned 80.104.248.250 TCP(445)
    30/01/05 19.37.20 Connection request 80.104.248.250 TCP(445)
    30/01/05 19.37.13 Port scanned 80.104.205.232 TCP(445)
    30/01/05 19.37.13 Connection request 80.104.205.232 TCP(445)
    30/01/05 19.37.13 Port scanned 80.104.22.96 TCP(445)
    30/01/05 19.37.13 Connection request 80.104.22.96 TCP(445)
    30/01/05 19.36.00 Port scanned 80.104.155.202 TCP(445)
    30/01/05 19.36.00 Connection request 80.104.155.202 TCP(445)
    30/01/05 19.36.00 Port scanned 80.104.208.7 TCP(445)
    30/01/05 19.36.00 Connection request 80.104.208.7 TCP(445)
    30/01/05 19.35.55 Port scanned 127.0.0.1 TCP(1282) TCP(1794)
    30/01/05 19.35.55 Connection request 127.0.0.1 TCP(1282)
    30/01/05 19.35.22 My address 127.0.0.1
    30/01/05 19.35.22 Connection request 127.0.0.1 TCP(1794)
    30/01/05 19.33.52 Port scanned 80.104.9.23 TCP(445)
    30/01/05 19.33.52 Connection request 80.104.9.23 TCP(445)
    30/01/05 19.33.34 Port scanned 80.104.104.21 TCP(445)
    30/01/05 19.33.34 Connection request 80.104.104.21 TCP(445)
    30/01/05 19.33.22 Port scanned 80.104.231.95 TCP(445)
    30/01/05 19.33.22 Connection request 80.104.231.95 TCP(445)


    ma non è una cosa un po' esagerata?

  2. #2
    Moderatore di Sicurezza informatica e virus L'avatar di Habanero
    Registrato dal
    Jun 2001
    Messaggi
    9,782
    esagerato o no non ci puoi comunque fare nulla...
    il log indicano comunque che Outpost fa il suo dovere anche se non tutte le segnalazioni sono per forza pericolose.

    Considera che molti virus e worm scansionano automaticamente la rete alla ricerca di porte 445 (condivisione file e stampanti) aperte e porte 135 (RPC/DCOM) vulnerabili. Questa ultima in particolare ha pemesso il diffondersi di virus come Blaster su sistemi non patchati...
    Leggi il REGOLAMENTO!

    E' molto complicato, un mucchio di input e output, una quantità di informazioni, un mucchio di elementi da considerare, ho una quantità di elementi da tener presente...
    Drugo

Permessi di invio

  • Non puoi inserire discussioni
  • Non puoi inserire repliche
  • Non puoi inserire allegati
  • Non puoi modificare i tuoi messaggi
  •  
Powered by vBulletin® Version 4.2.1
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved.