Wilde scans auf 1214 ist das normal?
Hallo Liste
habe seit kurzem viele Versuche auf port 1214 (Kazaa) ist das normal oder
sollte ich mir Gedanke machen.
MfG Arne
anbei fwlogwatch ich hoffe das ist nicht zulang?
Date: Wed, 08 May 2002 09:13:42 +0200
From: root <root@rincewind>
To: root@localhost
Subject: fwlogwatch daily news
fwlogwatch summary
Generated Wed May 08 09:13:39 CEST 2002 by root.
409 (and 835 older than 86400 seconds) of 3318 entries in the file "/var/log/messages" are packet logs, 32 have unique characteristics.
First packet log entry: May 07 10:10:55, last: May 08 00:05:51.
All entries were logged by the same host: "rincewind".
All entries are from the same chain: "-".
All entries have the same target: "-".
All entries are from the same interface: "ppp0".
May 07 10:10:55 to May 07 10:45:38 5 tcp packets from 217.228.76.68 to 217.228.184.198 port 80
May 07 15:38:14 to May 07 15:55:03 5 tcp packets from 217.228.183.181 to 217.228.181.41 port 80
May 07 15:51:45 to May 07 15:51:46 3 tcp packets from 80.132.42.75 to 217.228.181.41 port 80
May 07 15:52:25 to May 07 15:52:27 2 tcp packets from 217.228.157.132 to 217.228.181.41 port 80
May 07 15:54:43 to May 07 16:13:31 4 tcp packets from 217.228.76.68 to 217.228.181.41 port 80
May 07 16:44:00 to May 07 16:44:00 3 tcp packets from 80.67.179.10 to 217.228.181.41 port 33363
May 07 18:52:28 to May 07 19:05:33 8 tcp packets from 217.0.50.249 to 217.88.226.106 port 1214
May 07 18:52:49 to - 1 tcp packet from 217.228.10.202 to 217.88.226.106 port 4662
May 07 18:55:19 to May 07 20:54:21 33 tcp packets from 195.186.245.242 to 217.88.226.106 port 1214
May 07 18:56:13 to May 07 19:23:16 20 tcp packets from 217.225.118.170 to 217.88.226.106 port 1214
May 07 18:58:28 to May 08 00:06:52 68 tcp packets from 62.178.240.156 to 217.88.226.106 port 1214
May 07 19:02:56 to May 07 21:47:08 42 tcp packets from 217.1.25.1 to 217.88.226.106 port 1214
May 07 19:09:20 to May 07 19:09:23 3 tcp packets from 172.184.166.136 to 217.88.226.106 port 1214
May 07 19:11:23 to May 07 19:11:25 3 tcp packets from 212.152.135.111 to 217.88.226.106 port 1214
May 07 19:12:21 to - 1 tcp packet from 217.84.43.8 to 217.88.226.106 port 4662
May 07 19:20:54 to May 07 21:24:16 3 tcp packets from 80.138.163.190 to 217.88.226.106 port 4662
May 07 19:27:04 to May 07 19:27:08 3 tcp packets from 80.130.69.207 to 217.88.226.106 port 1214
May 07 20:24:20 to May 07 22:45:57 75 tcp packets from 212.114.164.77 to 217.88.226.106 port 1214
May 07 20:28:45 to May 07 20:28:46 3 tcp packets from 62.131.221.131 to 217.88.226.106 port 1214
May 07 20:45:56 to May 07 22:17:44 6 tcp packets from 80.2.255.15 to 217.88.226.106 port 1214
May 07 20:46:59 to May 07 20:47:00 3 tcp packets from 62.225.225.231 to 217.88.226.106 port 80
May 07 20:47:52 to May 07 20:47:54 3 tcp packets from 213.47.16.166 to 217.88.226.106 port 1214
May 07 20:52:19 to May 07 22:32:17 12 tcp packets from 212.6.79.158 to 217.88.226.106 port 1214
May 07 20:53:24 to May 07 20:53:26 4 tcp packets from 80.136.158.147 to 217.88.226.106 port 1214
May 07 21:04:54 to May 08 00:08:21 62 tcp packets from 195.186.131.162 to 217.88.226.106 port 1214
May 07 21:15:07 to - 1 tcp packet from 211.177.32.43 to 217.88.226.106 port 111
May 07 21:30:14 to May 07 21:30:16 4 tcp packets from 80.129.239.4 to 217.88.226.106 port 1214
May 07 21:48:58 to May 07 22:17:16 15 tcp packets from 212.114.170.212 to 217.88.226.106 port 1214
May 07 22:53:47 to May 07 22:53:48 4 tcp packets from 80.139.209.124 to 217.88.226.106 port 1214
May 07 23:09:05 to - 1 tcp packet from 213.193.0.44 to 217.88.226.106 port 33852
May 07 23:47:37 to May 08 00:09:28 7 tcp packets from 62.83.91.165 to 217.88.226.106 port 1214
May 08 00:05:51 to May 08 00:05:52 3 tcp packets from 217.82.84.99 to 217.88.226.106 port 1214
--
Zum AUSTRAGEN schicken Sie eine Mail an debian-user-german-request@lists.debian.org
mit dem Subject "unsubscribe". Probleme? Mail an listmaster@lists.debian.org (engl)
Reply to: