Newsgroup: it.comp.sicurezza.windows
Titolo: ATTACCHI

il mio firewall identifica una notevole quantità di attacchi; vedi log
sotto.
E' normale ????
Stefano
23/09/03 23.28.51	Connection request	80.181.194.202	TCP(135) 
23/09/03 23.28.21	Connection request	80.179.207.177	ICMP(2048) 
23/09/03 23.28.01	Connection request	160.80.86.122	TCP(1965) 
23/09/03 23.26.18	Connection request	66.220.17.152	TCP(1984) 
23/09/03 23.26.01	Connection request	80.182.252.95	ICMP(2048) 
23/09/03 23.25.08	Port scanned	80.182.118.238	TCP(445) 
23/09/03 23.25.08	Connection request	80.182.118.238	TCP(445) 
23/09/03 23.22.52	Port scanned	127.0.0.1	TCP(1328) TCP(1707) TCP(1161)
TCP(1459) TCP(1920) TCP(1718) 
23/09/03 23.22.52	Connection request	127.0.0.1	TCP(1328) 
23/09/03 23.22.51	Connection request	127.0.0.1	TCP(1707) 
23/09/03 23.22.50	Connection request	127.0.0.1	TCP(1161) 
23/09/03 23.22.38	Connection request	127.0.0.1	TCP(1459) 
23/09/03 23.22.37	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.22.36	Connection request	81.84.143.48	TCP(1965) 
23/09/03 23.22.32	Connection request	127.0.0.1	TCP(1718) 
23/09/03 23.22.26	Connection request	80.179.89.217	ICMP(2048) 
23/09/03 23.22.25	Connection request	80.182.220.233	ICMP(2048) 
23/09/03 23.22.10	Connection request	80.182.8.4	TCP(135) 
23/09/03 23.22.10	Connection request	80.182.21.146	TCP(135) 
23/09/03 23.21.54	Connection request	80.182.250.235	ICMP(2048) 
23/09/03 23.20.52	My address	127.0.0.1	
23/09/03 23.19.33	Connection request	80.181.241.175	TCP(135) 
23/09/03 23.19.23	Connection request	80.179.70.130	ICMP(2048) 
23/09/03 23.19.08	Connection request	80.179.198.167	ICMP(2048) 
23/09/03 23.19.00	Connection request	80.181.104.36	TCP(135) 
23/09/03 23.18.34	Connection request	80.181.226.253	TCP(135) 
23/09/03 23.18.11	Connection request	80.179.91.217	ICMP(2048) 
23/09/03 23.17.46	Connection request	80.182.117.101	ICMP(2048) 
23/09/03 23.17.20	Connection request	80.164.67.186	TCP(135) 
23/09/03 23.17.19	Connection request	80.182.100.194	TCP(1633) 
23/09/03 23.17.18	Port scanned	80.182.55.151	TCP(445) 
23/09/03 23.17.18	Connection request	80.182.55.151	TCP(445) 
23/09/03 23.17.01	Connection request	66.220.17.152	TCP(1811) 
23/09/03 23.16.57	Connection request	80.181.182.180	TCP(135) 
23/09/03 23.16.51	Connection request	80.181.117.44	TCP(135) 
23/09/03 23.16.40	Connection request	80.179.220.130	ICMP(2048) 
23/09/03 23.16.33	Connection request	68.75.63.106	UDP(137) 
23/09/03 23.16.20	Connection request	80.180.175.193	TCP(135) 
23/09/03 23.15.52	Connection request	80.179.219.254	ICMP(2048) 
23/09/03 23.15.10	Connection request	80.180.79.229	TCP(135) 
23/09/03 23.13.26	Connection request	80.182.31.77	TCP(1795) 
23/09/03 23.13.20	Connection request	80.179.76.158	ICMP(2048) 
23/09/03 23.13.17	Connection request	80.182.74.156	TCP(1328) 
23/09/03 23.13.14	Connection request	80.181.54.63	ICMP(2048) 
23/09/03 23.13.10	Connection request	80.182.31.77	TCP(1299) 
23/09/03 23.12.47	Connection request	193.231.249.236	TCP(135) 
23/09/03 23.12.41	Connection request	80.181.204.28	TCP(135) 
23/09/03 23.12.36	Connection request	80.182.31.77	TCP(1539) 
23/09/03 23.12.00	Port scanned	127.0.0.1	TCP(1376) TCP(1736) TCP(1920)
TCP(1855) TCP(1700) TCP(1780) 
23/09/03 23.12.00	Connection request	127.0.0.1	TCP(1376) 
23/09/03 23.11.59	Connection request	127.0.0.1	TCP(1736) 
23/09/03 23.11.59	Connection request	80.179.75.11	ICMP(2048) 
23/09/03 23.11.55	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.11.53	Connection request	127.0.0.1	TCP(1855) 
23/09/03 23.11.51	Connection request	127.0.0.1	TCP(1700) 
23/09/03 23.11.51	Connection request	127.0.0.1	TCP(1780) 
23/09/03 23.11.25	Connection request	80.179.82.168	ICMP(2048) 
23/09/03 23.11.01	Connection request	80.182.31.62	ICMP(2048) 
23/09/03 23.10.50	My address	127.0.0.1	
23/09/03 23.09.46	Connection request	80.182.4.232	TCP(135) 
23/09/03 23.09.15	Connection request	80.179.73.237	ICMP(2048) 
23/09/03 23.08.01	Connection request	80.182.100.194	TCP(1460) 
23/09/03 23.08.01	Connection request	216.52.184.238	TCP(1529) 
23/09/03 23.07.35	Connection request	80.179.76.172	ICMP(2048) 
23/09/03 23.07.33	Connection request	80.182.96.86	TCP(1811) 
23/09/03 23.07.04	Connection request	66.220.17.152	TCP(1339) 
23/09/03 23.06.45	Connection request	80.181.236.181	TCP(135) 
23/09/03 23.06.22	Connection request	80.181.236.149	TCP(135) 
23/09/03 23.05.27	Connection request	216.52.184.238	TCP(1260) 
23/09/03 23.05.22	Connection request	80.181.236.149	TCP(135) 
23/09/03 23.05.15	Connection request	80.181.231.241	TCP(135) 
23/09/03 23.04.47	Connection request	80.182.109.249	TCP(1101) 
23/09/03 23.04.32	Connection request	80.180.175.193	TCP(135) 
23/09/03 23.03.36	Connection request	66.220.17.152	TCP(1240) 
23/09/03 23.03.31	Connection request	80.182.195.214	ICMP(2048) 
23/09/03 23.03.10	Connection request	80.179.64.4	ICMP(2048) 
23/09/03 23.02.55	Connection request	80.179.95.121	ICMP(2048) 
23/09/03 23.01.49	Port scanned	127.0.0.1	TCP(1636) TCP(1641) TCP(1372)
TCP(1718) TCP(1260) TCP(1920) 
23/09/03 23.01.49	Connection request	127.0.0.1	TCP(1636) 
23/09/03 23.01.39	Connection request	127.0.0.1	TCP(1641) 
23/09/03 23.01.33	Connection request	127.0.0.1	TCP(1372) 
23/09/03 23.01.31	Connection request	80.182.2.50	TCP(135) 
23/09/03 23.01.19	Connection request	127.0.0.1	TCP(1718) 
23/09/03 23.01.18	Connection request	127.0.0.1	TCP(1260) 
23/09/03 23.01.18	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.00.52	Connection request	80.179.82.202	ICMP(2048) 
23/09/03 23.00.42	Connection request	80.180.124.210	ICMP(2048) 
23/09/03 23.00.39	My address	127.0.0.1	
23/09/03 22.58.44	Connection request	80.179.217.196	ICMP(2048) 
23/09/03 22.58.18	Connection request	216.52.184.238	TCP(1718) 
23/09/03 22.57.28	Connection request	66.220.17.152	TCP(1298) 
23/09/03 22.57.23	Connection request	80.179.193.230	ICMP(2048) 
23/09/03 22.57.22	Connection request	80.182.201.207	ICMP(2048) 
23/09/03 22.57.13	Connection request	80.179.90.240	ICMP(2048) 
23/09/03 22.56.00	Connection request	80.179.40.18	ICMP(2048) 
23/09/03 22.54.44	Connection request	80.181.109.220	TCP(135) 
23/09/03 22.54.17	Connection request	80.181.172.111	TCP(135) 
23/09/03 22.53.22	Connection request	80.182.217.165	ICMP(2048) 
23/09/03 22.52.25	Connection request	80.179.81.73	ICMP(2048) 
23/09/03 22.52.18	Connection request	80.181.231.245	TCP(135) 
23/09/03 22.52.08	Connection request	66.220.17.152	TCP(1736) 
23/09/03 22.51.58	Connection request	80.182.74.156	TCP(1600) 
23/09/03 22.51.29	Connection request	80.179.203.180	ICMP(2048) 
23/09/03 22.51.12	Port scanned	127.0.0.1	TCP(1227) TCP(1376) TCP(1412)
TCP(1736) TCP(1088) TCP(1335) 
23/09/03 22.51.12	Connection request	127.0.0.1	TCP(1227) 
23/09/03 22.51.04	Connection request	127.0.0.1	TCP(1376) 
23/09/03 22.50.57	Connection request	127.0.0.1	TCP(1412) 
23/09/03 22.50.43	Connection request	127.0.0.1	TCP(1736) 
23/09/03 22.50.38	Connection request	127.0.0.1	TCP(1088) 
23/09/03 22.50.38	My address	127.0.0.1	
23/09/03 22.50.38	Connection request	127.0.0.1	TCP(1335) 23/09/03
23.28.51	Connection request	80.181.194.202	TCP(135) 
23/09/03 23.28.21	Connection request	80.179.207.177	ICMP(2048) 
23/09/03 23.28.01	Connection request	160.80.86.122	TCP(1965) 
23/09/03 23.26.18	Connection request	66.220.17.152	TCP(1984) 
23/09/03 23.26.01	Connection request	80.182.252.95	ICMP(2048) 
23/09/03 23.25.08	Port scanned	80.182.118.238	TCP(445) 
23/09/03 23.25.08	Connection request	80.182.118.238	TCP(445) 
23/09/03 23.22.52	Port scanned	127.0.0.1	TCP(1328) TCP(1707) TCP(1161)
TCP(1459) TCP(1920) TCP(1718) 
23/09/03 23.22.52	Connection request	127.0.0.1	TCP(1328) 
23/09/03 23.22.51	Connection request	127.0.0.1	TCP(1707) 
23/09/03 23.22.50	Connection request	127.0.0.1	TCP(1161) 
23/09/03 23.22.38	Connection request	127.0.0.1	TCP(1459) 
23/09/03 23.22.37	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.22.36	Connection request	81.84.143.48	TCP(1965) 
23/09/03 23.22.32	Connection request	127.0.0.1	TCP(1718) 
23/09/03 23.22.26	Connection request	80.179.89.217	ICMP(2048) 
23/09/03 23.22.25	Connection request	80.182.220.233	ICMP(2048) 
23/09/03 23.22.10	Connection request	80.182.8.4	TCP(135) 
23/09/03 23.22.10	Connection request	80.182.21.146	TCP(135) 
23/09/03 23.21.54	Connection request	80.182.250.235	ICMP(2048) 
23/09/03 23.20.52	My address	127.0.0.1	
23/09/03 23.19.33	Connection request	80.181.241.175	TCP(135) 
23/09/03 23.19.23	Connection request	80.179.70.130	ICMP(2048) 
23/09/03 23.19.08	Connection request	80.179.198.167	ICMP(2048) 
23/09/03 23.19.00	Connection request	80.181.104.36	TCP(135) 
23/09/03 23.18.34	Connection request	80.181.226.253	TCP(135) 
23/09/03 23.18.11	Connection request	80.179.91.217	ICMP(2048) 
23/09/03 23.17.46	Connection request	80.182.117.101	ICMP(2048) 
23/09/03 23.17.20	Connection request	80.164.67.186	TCP(135) 
23/09/03 23.17.19	Connection request	80.182.100.194	TCP(1633) 
23/09/03 23.17.18	Port scanned	80.182.55.151	TCP(445) 
23/09/03 23.17.18	Connection request	80.182.55.151	TCP(445) 
23/09/03 23.17.01	Connection request	66.220.17.152	TCP(1811) 
23/09/03 23.16.57	Connection request	80.181.182.180	TCP(135) 
23/09/03 23.16.51	Connection request	80.181.117.44	TCP(135) 
23/09/03 23.16.40	Connection request	80.179.220.130	ICMP(2048) 
23/09/03 23.16.33	Connection request	68.75.63.106	UDP(137) 
23/09/03 23.16.20	Connection request	80.180.175.193	TCP(135) 
23/09/03 23.15.52	Connection request	80.179.219.254	ICMP(2048) 
23/09/03 23.15.10	Connection request	80.180.79.229	TCP(135) 
23/09/03 23.13.26	Connection request	80.182.31.77	TCP(1795) 
23/09/03 23.13.20	Connection request	80.179.76.158	ICMP(2048) 
23/09/03 23.13.17	Connection request	80.182.74.156	TCP(1328) 
23/09/03 23.13.14	Connection request	80.181.54.63	ICMP(2048) 
23/09/03 23.13.10	Connection request	80.182.31.77	TCP(1299) 
23/09/03 23.12.47	Connection request	193.231.249.236	TCP(135) 
23/09/03 23.12.41	Connection request	80.181.204.28	TCP(135) 
23/09/03 23.12.36	Connection request	80.182.31.77	TCP(1539) 
23/09/03 23.12.00	Port scanned	127.0.0.1	TCP(1376) TCP(1736) TCP(1920)
TCP(1855) TCP(1700) TCP(1780) 
23/09/03 23.12.00	Connection request	127.0.0.1	TCP(1376) 
23/09/03 23.11.59	Connection request	127.0.0.1	TCP(1736) 
23/09/03 23.11.59	Connection request	80.179.75.11	ICMP(2048) 
23/09/03 23.11.55	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.11.53	Connection request	127.0.0.1	TCP(1855) 
23/09/03 23.11.51	Connection request	127.0.0.1	TCP(1700) 
23/09/03 23.11.51	Connection request	127.0.0.1	TCP(1780) 
23/09/03 23.11.25	Connection request	80.179.82.168	ICMP(2048) 
23/09/03 23.11.01	Connection request	80.182.31.62	ICMP(2048) 
23/09/03 23.10.50	My address	127.0.0.1	
23/09/03 23.09.46	Connection request	80.182.4.232	TCP(135) 
23/09/03 23.09.15	Connection request	80.179.73.237	ICMP(2048) 
23/09/03 23.08.01	Connection request	80.182.100.194	TCP(1460) 
23/09/03 23.08.01	Connection request	216.52.184.238	TCP(1529) 
23/09/03 23.07.35	Connection request	80.179.76.172	ICMP(2048) 
23/09/03 23.07.33	Connection request	80.182.96.86	TCP(1811) 
23/09/03 23.07.04	Connection request	66.220.17.152	TCP(1339) 
23/09/03 23.06.45	Connection request	80.181.236.181	TCP(135) 
23/09/03 23.06.22	Connection request	80.181.236.149	TCP(135) 
23/09/03 23.05.27	Connection request	216.52.184.238	TCP(1260) 
23/09/03 23.05.22	Connection request	80.181.236.149	TCP(135) 
23/09/03 23.05.15	Connection request	80.181.231.241	TCP(135) 
23/09/03 23.04.47	Connection request	80.182.109.249	TCP(1101) 
23/09/03 23.04.32	Connection request	80.180.175.193	TCP(135) 
23/09/03 23.03.36	Connection request	66.220.17.152	TCP(1240) 
23/09/03 23.03.31	Connection request	80.182.195.214	ICMP(2048) 
23/09/03 23.03.10	Connection request	80.179.64.4	ICMP(2048) 
23/09/03 23.02.55	Connection request	80.179.95.121	ICMP(2048) 
23/09/03 23.01.49	Port scanned	127.0.0.1	TCP(1636) TCP(1641) TCP(1372)
TCP(1718) TCP(1260) TCP(1920) 
23/09/03 23.01.49	Connection request	127.0.0.1	TCP(1636) 
23/09/03 23.01.39	Connection request	127.0.0.1	TCP(1641) 
23/09/03 23.01.33	Connection request	127.0.0.1	TCP(1372) 
23/09/03 23.01.31	Connection request	80.182.2.50	TCP(135) 
23/09/03 23.01.19	Connection request	127.0.0.1	TCP(1718) 
23/09/03 23.01.18	Connection request	127.0.0.1	TCP(1260) 
23/09/03 23.01.18	Connection request	127.0.0.1	TCP(1920) 
23/09/03 23.00.52	Connection request	80.179.82.202	ICMP(2048) 
23/09/03 23.00.42	Connection request	80.180.124.210	ICMP(2048) 
23/09/03 23.00.39	My address	127.0.0.1	
23/09/03 22.58.44	Connection request	80.179.217.196	ICMP(2048) 
23/09/03 22.58.18	Connection request	216.52.184.238	TCP(1718) 
23/09/03 22.57.28	Connection request	66.220.17.152	TCP(1298) 
23/09/03 22.57.23	Connection request	80.179.193.230	ICMP(2048) 
23/09/03 22.57.22	Connection request	80.182.201.207	ICMP(2048) 
23/09/03 22.57.13	Connection request	80.179.90.240	ICMP(2048) 
23/09/03 22.56.00	Connection request	80.179.40.18	ICMP(2048) 
23/09/03 22.54.44	Connection request	80.181.109.220	TCP(135) 
23/09/03 22.54.17	Connection request	80.181.172.111	TCP(135) 
23/09/03 22.53.22	Connection request	80.182.217.165	ICMP(2048) 
23/09/03 22.52.25	Connection request	80.179.81.73	ICMP(2048) 
23/09/03 22.52.18	Connection request	80.181.231.245	TCP(135) 
23/09/03 22.52.08	Connection request	66.220.17.152	TCP(1736) 
23/09/03 22.51.58	Connection request	80.182.74.156	TCP(1600) 
23/09/03 22.51.29	Connection request	80.179.203.180	ICMP(2048) 
23/09/03 22.51.12	Port scanned	127.0.0.1	TCP(1227) TCP(1376) TCP(1412)
TCP(1736) TCP(1088) TCP(1335) 
23/09/03 22.51.12	Connection request	127.0.0.1	TCP(1227) 
23/09/03 22.51.04	Connection request	127.0.0.1	TCP(1376) 
23/09/03 22.50.57	Connection request	127.0.0.1	TCP(1412) 
23/09/03 22.50.43	Connection request	127.0.0.1	TCP(1736) 
23/09/03 22.50.38	Connection request	127.0.0.1	TCP(1088) 
23/09/03 22.50.38	My address	127.0.0.1	
23/09/03 22.50.38	Connection request	127.0.0.1	TCP(1335) 
-- 
questo articolo e` stato inviato via web dal servizio gratuito 
http://www.newsland.it/news
 segnala gli abusi ad 
ab...@newsland.it

 sotto. E' normale ????
1) E' normale
2) Evita di postare 15Kb di log che nessuno si prendera'
mai il disturbo di leggere.
-- 
Stardust®

 Stefano
Cosa lo installate a fare un firewall se non avete la minima idea di
cosa faccia?

/\/eoviruz ha scritto:





e poi tutte queste parole ATTACCHI
ma siete cosi importanti voi?
queste parole non le uso nemmeno io nei server che amministro in datacenter
(per l'azienda)
e arrivano i consumer e dicono ATTACCHI
poi sai al bar con gli amici
il mio FIREWALLO ha segnalato ATTACCHI

 il mio firewall identifica una notevole quantitą di attacchi; vedi log


 guarda bene gli altri post e fai una ricerca per 127.0.0.1
Ciao,
mai sentito parlare di quoting?
-- 
Stardust®