Newsgroup: it.comp.reti.locali
Titolo: Attività router

Registro questa attività nel router senza utilizzare la connessione a 
internet, potreste dirmi di cosa si potrebbe trattare? Il mio ip è 
***82.56.178.254*** contrassegnato fra i 3 asterischi.
Grazie e ciao
TCP (W to W/PRESTIGE) 
82.56.63.32:4403
     ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.174.139:1574
   ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.178.2:4088
     ***82.56.178.254***:445 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.61.251:1644
    ***82.56.178.254***:445 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.61.251:1644
    ***82.56.178.254***:445 ACCESS 
DROPPED
UDP (W to W/PRESTIGE) 
45.179.142.60:31255
  ***82.56.178.254***:1026 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.126.125:3255
   ***82.56.178.254***:80 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.126.125:3255
   ***82.56.178.254***:80 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
82.56.149.184:2468
   ***82.56.178.254***:135 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
88.113.109.54:1790
   ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
88.113.109.54:1790
   ***82.56.178.254***:16881 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
82.61.139.73:4788
    ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.59.58:4378
     ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
87.90.32.190:4011
    ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
87.90.32.190:4011
    ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
87.90.32.190:4011
    ***82.56.178.254***:16881 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
82.56.174.139:1574
   ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.178.2:4088
     ***82.56.178.254***:445 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.56.152:1241
    ***82.56.178.254***:445 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
88.113.109.54:1790
   ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.89.248:4619
    ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.89.248:4619
    ***82.56.178.254***:135 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
82.56.17.175:14981
   ***82.56.178.254***:445 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.174.139:4124
   ***82.56.178.254***:135 ACCESS 
DROPPED
UDP (W to W/PRESTIGE) 
204.16.208.70:32770
  ***82.56.178.254***:1027 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.123.159:3825
   ***82.56.178.254***:139 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
84.150.151.6:65088
   ***82.56.178.254***:16881 ACCESS 
DROPPED
UDP (W to W/PRESTIGE) 
222.81.80.14:2453
    ***82.56.178.254***:1434 ACCESS 
DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
TCP (W to W/PRESTIGE) 
82.56.119.244:4574
   ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
84.150.151.6:65088
   ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.123.159:3825
   ***82.56.178.254***:139 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
84.150.151.6:65088
   ***82.56.178.254***:16881 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.89.248:4743
    ***82.56.178.254***:135 ACCESS 
DROPPED
TCP (W to W/PRESTIGE) 
82.56.89.248:4743
    ***82.56.178.254***:135 ACCESS 
DROPPED

Ale <.> wrote in message,
44d983f4$0$47970$
4faf...@reader3.news.tin.it

sono tentativi di accesso dall'esterno tutti droppati
quindi va tutto bene.
ciao.
-- 
Edoardo Benussi - 
e...@mvps.org
Microsoft® MVP - Windows Server
http://mvp.support.microsoft.com
 

 
http://mvp.support.microsoft.com
Ma date le porte utilizzate per questi tentativi d'accesso si può dire che 
hanno uno scopo ben preciso (tentativi d'intrusione) oppure no? Ti chiedo 
questo perchè vorrei capirne un pò di più....
Ad esempio cosa rappresenta
IGMP (W to W/PRESTIGE) 217.141.109.24      224.0.0.1 ACCESS DROPPED
con questo 224.0.0.1 ?????
ppure
TCP (W to W/PRESTIGE) 
82.56.63.32:4403
     ***82.56.178.254***:135 ACCESS
DROPPED
che se non sbaglio la porta 135 viene utilizzata dal netbios?
Non è che bloccando le comunicazioni Wan To Wan blocco anche attività 
essenziali per il mio router, considerando che non mi collego mai in remoto?
Grazie e Ciao 

 questo perchč vorrei capirne un pň di piů....
82.56.126.125:3255
   ***82.56.178.254***:80
ricerca per vedere se hai un web server attivo
TCP (W to W/PRESTIGE) 
88.113.109.54:1790
   ***82.56.178.254***:16881
porta 16881 stai scaricando con Azueus o qualche altro p2p e da remoto 
qualcuno cerca di connettersi al tuo stesso torrente.
TCP (W to W/PRESTIGE) 
82.56.123.159:3825
   ***82.56.178.254***:139
TCP (W to W/PRESTIGE) 
82.56.56.152:1241
    ***82.56.178.254***:445
tentativi su porte NetBIOS over TCP/IP
222.81.80.14:2453
    ***82.56.178.254***:1434
porta SQL monitor (generalmente attaccata da SQL-hell)
e cosě via
sono scansioni generalmente usuali su internet da parte di gente che cerca 
macchine senza patch o comunque sprotette.
Wok

 remoto?
non conosco il tuo router
ma ti consiglio di fare delle prove.
