Newsgroup: it.comp.sicurezza.windows
Titolo: Cos'è successo?

Mentre ero collegato ai vari ng improvvisamente il log report di ZA
riportava una settantina di segnalazioni per tentata intrusione, ie5
partiva improvvisamente, benchč in quel momento usassi solo agent. Il
pulsante di ZA che dovrebbe bloccare tutti gli accessi a internet era
fuori uso  completamente. Per evitare problemi spegnevo immediatamente
il modem, facendo cosě cessare tutti quei fenomeni strani. Controllavo
con the cleaner, avp se c'era qualche trojan o virus, ma nulla
risultava e anche successivamente non mi risultano problemi sul pc.
Domando se devo effettuare qualche controllo particolare o se lo
spegnimento del modem č riuscito a evitare danni alla macchina e se
devo prendere altre misure per una maggior sicurezza.
Ringrazio chi voglia rispondere e sotto c'č il log report un po' lungo
di ZA.
FWIN,2000/08/26,18:08:00 +1:00
GMT,
212.141.78.241:1973
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:02 +1:00
GMT,
212.141.78.241:1976
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:02 +1:00
GMT,
212.141.78.241:1977
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:04 +1:00
GMT,
212.141.78.241:1979
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:04 +1:00
GMT,
212.141.78.241:1981
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:04 +1:00
GMT,
212.141.78.243:1033
,
212.141.98.44:2478
,TCP
FWIN,2000/08/26,18:08:04 +1:00
GMT,
212.141.78.243:1245
,
212.141.98.44:2485
,TCP
FWOUT,2000/08/26,18:08:04 +1:00
GMT,
212.141.98.44:2475
,
212.141.78.243:1012
,TCP
FWOUT,2000/08/26,18:08:04 +1:00
GMT,
212.141.98.44:2488
,
212.141.78.243:1492
,TCP
FWOUT,2000/08/26,18:08:04 +1:00
GMT,
212.141.98.44:2473
,
212.141.78.243:1010
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2490
,
212.141.78.243:1600
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2481
,
212.141.78.243:1170
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2489
,
212.141.78.243:1509
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:2115
,
212.141.98.44:2497
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.241:20034
,
212.141.98.44:2418
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:2140
,
212.141.98.44:2498
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:1000
,
212.141.98.44:2471
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2482
,
212.141.78.243:1207
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:1001
,
212.141.98.44:2472
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:555
,
212.141.98.44:2468
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:456
,
212.141.98.44:2467
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:1269
,
212.141.98.44:2486
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:777
,
212.141.98.44:2470
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:1080
,
212.141.98.44:2480
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:1349
,
212.141.98.44:2487
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.243:2283
,
212.141.98.44:2499
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2477
,
212.141.78.243:1016
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2491
,
212.141.78.243:1807
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2494
,
212.141.78.243:2000
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2492
,
212.141.78.243:1981
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2495
,
212.141.78.243:2001
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2493
,
212.141.78.243:1999
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2479
,
212.141.78.243:1042
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2496
,
212.141.78.243:2023
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2476
,
212.141.78.243:1015
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.241:1976
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.241:1977
,
212.141.98.44:139
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2435
,
212.141.78.241:31337
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2438
,
212.141.78.241:31666
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2456
,
212.141.78.241:54320
,TCP
FWOUT,2000/08/26,18:08:06 +1:00
GMT,
212.141.98.44:2457
,
212.141.78.241:54321
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.241:1971
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:06 +1:00
GMT,
212.141.78.241:1979
,
212.141.98.44:139
,TCP
FWOUT,2000/08/26,18:08:08 +1:00
GMT,
212.141.98.44:2484
,
212.141.78.243:1243
,TCP
FWOUT,2000/08/26,18:08:08 +1:00
GMT,
212.141.98.44:2497
,
212.141.78.243:2115
,TCP
FWOUT,2000/08/26,18:08:08 +1:00
GMT,
212.141.98.44:2498
,
212.141.78.243:2140
,TCP
FWOUT,2000/08/26,18:08:08 +1:00
GMT,
212.141.98.44:2418
,
212.141.78.241:20034
,TCP
FWIN,2000/08/26,18:08:08 +1:00
GMT,
212.141.78.241:1981
,
212.141.98.44:139
,TCP
FWIN,2000/08/26,18:08:08 +1:00
GMT,
212.141.78.241:1973
,
212.141.98.44:139
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2435
,
212.141.78.241:31337
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2438
,
212.141.78.241:31666
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2456
,
212.141.78.241:54320
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2483
,
212.141.78.243:1234
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2485
,
212.141.78.243:1245
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2486
,
212.141.78.243:1269
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2487
,
212.141.78.243:1349
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2488
,
212.141.78.243:1492
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2490
,
212.141.78.243:1600
,TCP
FWOUT,2000/08/26,18:08:10 +1:00
GMT,
212.141.98.44:2489
,
212.141.78.243:1509
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2491
,
212.141.78.243:1807
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2494
,
212.141.78.243:2000
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2492
,
212.141.78.243:1981
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2495
,
212.141.78.243:2001
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2493
,
212.141.78.243:1999
,TCP
FWOUT,2000/08/26,18:08:12 +1:00
GMT,
212.141.98.44:2496
,
212.141.78.243:2023
,TCP
FWOUT,2000/08/26,18:08:14 +1:00
GMT,
212.141.98.44:2484
,
212.141.78.243:1243
,TCP
FWOUT,2000/08/26,18:08:14 +1:00
GMT,
212.141.98.44:2418
,
212.141.78.241:20034
,TCP

GMT,
212.141.78.243:456
,
212.141.98.44:2467
,TCP
Questo e' proprio messo male, ha anche Hackers Paradise
e via cosi'...
Insomma, pare che qualcuno a cui hai fatto uno scan abbia risposto in
modo positivo, solo che ZA ha bloccato...
In breve: se vuoi fare un portscan e sapere anche se ricevi risposta,
disabilita il firewall...
Anzi, fai di meglio.
Elimina qual programmino lamah che va a caccia di backdoor, che se
becchi una persona un minimo sveglia s'incazza a morte.
-- 
Don't Let Your Fears Stand In The Way Of Your Dreams
DEly...@dely-net.com
http://www.dely-net.com/
ICQ# - 8761263
-- 

SIl tizio in questione deve essere sempre quello che da un paio di
settimane più volte al giorno mi scanna sulle porte 1243 12345 31337
137 138 139. Per fargli capire di non rompere più gli avevo lanciato
con super scanner un po' di ping, solo con l' intenzione di avvertirlo
di smetterla. Comunque recepisco la vostra lezione: basta giochetti
stupidi con partner stupidi e eventualmente segnalare gli eventuali
lameristi.
Grazie.