30.07.2012, 19:24
Hej, od wczoraj mam problem z przeglądaniem forum. Outpost cały czas blokuje ataki z adresów IP.
Log:17:43:15 2.21.35.159 Subnet blocked for 5 min SCAN (13260, 16076, 15820)
17:43:15 2.21.35.159 Detected attack, host not blocked SINGLE_SCAN_PORT (13260)
17:43:13 92.122.244.191 Subnet blocked for 5 min SCAN (6860, 8652, 9676)
17:43:13 92.122.244.191 Detected attack, host not blocked SINGLE_SCAN_PORT (6860)
17:42:23 184.73.196.165 Subnet blocked for 5 min SCAN (51916, 52172, 56780)
17:42:09 184.73.196.165 Detected attack, host not blocked SINGLE_SCAN_PORT (51916)
17:41:26 2.21.60.20 Subnet blocked for 5 min SCAN (40907, 42699, 52171)
17:36:27 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (24012)
17:36:13 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (23244)
17:35:53 91.228.198.240 Subnet blocked for 5 min SCAN (61643, 3788, 63179)
17:35:48 50.17.220.219 Subnet blocked for 5 min SCAN (1228, 1484, 5580)
17:26:01 209.85.148.95 Detected attack, host not blocked SINGLE_SCAN_PORT (52938)
17:25:56 2.21.60.20 Detected attack, host not blocked SINGLE_SCAN_PORT (41674)
17:25:51 69.171.242.74 Detected attack, host not blocked SINGLE_SCAN_PORT (11723)
17:25:45 107.22.170.172 Subnet blocked for 5 min SCAN (30155, 30411, 31179)
17:25:24 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (18635)
17:24:51 23.21.215.52 Subnet blocked for 5 min SCAN (13259, 14539, 13771)
17:24:51 74.50.124.132 Subnet blocked for 5 min SCAN (6859, 3019, 5579)
17:24:51 74.50.124.132 Detected attack, host not blocked SINGLE_SCAN_PORT (6859)
17:24:00 77.109.171.96 Detected attack, host not blocked SINGLE_SCAN_PORT (12234)
17:24:00 77.109.171.162 Detected attack, host not blocked SINGLE_SCAN_PORT (9162)
17:23:07 91.228.198.240 Subnet blocked for 5 min SCAN (52682, 61130, 62410)
17:23:03 23.21.215.52 Detected attack, host not blocked SINGLE_SCAN_PORT (459)
17:21:59 91.228.198.240 Detected attack, host not blocked SINGLE_SCAN_PORT (52682)
17:21:55 107.22.170.172 Detected attack, host not blocked SINGLE_SCAN_PORT (54986)
17:12:10 184.73.196.165 Subnet blocked for 5 min SCAN (33224, 33480, 39112)
17:11:22 209.85.148.101 Detected attack, host not blocked SINGLE_SCAN_PORT (32711)
17:11:19 209.85.148.102 Detected attack, host not blocked SINGLE_SCAN_PORT (35527)
17:11:10 209.85.148.100 Detected attack, host not blocked SINGLE_SCAN_PORT (51143)
17:11:10 209.85.148.190 Detected attack, host not blocked SINGLE_SCAN_PORT (49351)
17:11:09 209.85.148.157 Detected attack, host not blocked SINGLE_SCAN_PORT (44231)
17:10:48 91.228.198.240 Detected attack, host not blocked SINGLE_SCAN_PORT (64711)
17:10:44 107.20.231.51 Detected attack, host not blocked SINGLE_SCAN_PORT (12232)
17:10:29 209.85.148.136 Detected attack, host not blocked SINGLE_SCAN_PORT (25287)
17:09:10 66.220.158.74 Subnet blocked for 5 min SCAN (23239, 24007, 47815)
17:08:29 66.220.158.74 Detected attack, host not blocked SINGLE_SCAN_PORT (23239)
17:08:10 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (49863, 50375)
17:04:42 91.228.198.240 Subnet blocked for 5 min SCAN (44486, 46022, 47558)
17:01:29 194.0.171.159 Subnet blocked for 5 min SCAN (27078, 32966, 27334)
17:01:29 194.0.171.152 Subnet blocked for 5 min SCAN (29126, 24262, 27590)
17:00:27 173.194.66.118 Subnet blocked for 5 min SCAN (37573, 37317, 38085)
17:00:08 209.85.148.132 Subnet blocked for 5 min SCAN (8645, 9157, 22725)
17:00:08 209.85.148.191 Subnet blocked for 5 min SCAN (17093, 17349, 16837)
16:58:10 77.109.171.107 Detected attack, host not blocked SINGLE_SCAN_PORT (11462)
16:58:09 173.194.35.167 Detected attack, host not blocked SINGLE_SCAN_PORT (41924)
16:58:09 173.194.35.168 Detected attack, host not blocked SINGLE_SCAN_PORT (42180)
16:58:09 173.194.65.118 Detected attack, host not blocked SINGLE_SCAN_PORT (41668)
16:58:08 69.63.189.74 Detected attack, host not blocked SINGLE_SCAN_PORT (15813)
16:58:03 72.233.111.159 Detected attack, host not blocked SINGLE_SCAN_PORT (59589)
16:57:55 77.109.171.115 Detected attack, host not blocked SINGLE_SCAN_PORT (10694)
16:57:50 107.20.231.51 Detected attack, host not blocked SINGLE_SCAN_PORT (5318)
16:57:50 107.22.163.248 Subnet blocked for 5 min SCAN (6086, 5062, 6854)
16:57:50 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (6086)
16:57:09 50.17.220.219 Subnet blocked for 5 min SCAN (7109, 30405, 31685)
16:56:35 50.17.220.219 Detected attack, host not blocked SINGLE_SCAN_PORT (7109)
16:39:18 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (26820)
16:26:16 77.109.171.48 Detected attack, host not blocked SINGLE_SCAN_PORT (27075)
16:26:16 77.109.171.25 Detected attack, host not blocked SINGLE_SCAN_PORT (45251)
16:26:16 77.67.20.41 Detected attack, host not blocked SINGLE_SCAN_PORT (43971)
16:22:54 91.203.99.45 Detected attack, host not blocked SINGLE_SCAN_PORT (8387)
16:22:24 199.7.59.190 Detected attack, host not blocked SINGLE_SCAN_PORT (27587)
16:19:41 77.109.171.10 Subnet blocked for 5 min SCAN (50625, 52929, 18881)
16:18:58 50.17.214.94 Subnet blocked for 5 min SCAN (57795, 58051, 58563)
16:18:56 89.161.250.16 Subnet blocked for 5 min SCAN (34499, 34243, 36291)
16:15:44 173.194.65.102 Subnet blocked for 5 min SCAN (35777, 36033, 38338)
16:15:10 173.194.66.147 Subnet blocked for 5 min SCAN (25025, 24769, 24513)
16:13:35 77.79.216.111 Subnet blocked for 5 min SCAN (61377, 4034, 3522)
16:12:54 77.109.171.121 Subnet blocked for 5 min SCAN (44225, 43457, 43201)
16:12:45 94.127.76.180 Subnet blocked for 5 min SCAN (21953, 29634, 33218)
16:12:17 77.109.171.107 Subnet blocked for 5 min SCAN (44481, 43969, 42945)
16:12:11 184.73.187.64 Subnet blocked for 5 min SCAN (52160, 32705, 34753)
16:12:09 77.109.171.121 Detected attack, host not blocked SINGLE_SCAN_PORT (44225)
16:12:08 77.109.171.107 Detected attack, host not blocked SINGLE_SCAN_PORT (44481)
16:12:04 107.22.184.229 Detected attack, host not blocked SINGLE_SCAN_PORT (51904)
16:12:04 184.73.187.64 Detected attack, host not blocked SINGLE_SCAN_PORT (52160)
16:12:04 107.22.170.172 Detected attack, host not blocked SINGLE_SCAN_PORT (51392)
16:12:04 50.18.181.128 Detected attack, host not blocked SINGLE_SCAN_PORT (38592)
16:12:03 2.21.47.139 Detected attack, host not blocked SINGLE_SCAN_PORT (62913)
16:11:55 69.73.144.49 Detected attack, host not blocked SINGLE_SCAN_PORT (21440)
16:11:54 23.61.255.195 Detected attack, host not blocked SINGLE_SCAN_PORT (53697)
16:11:47 174.122.73.35 Detected attack, host not blocked SINGLE_SCAN_PORT (7104)
W czasie blokowania IP strony forum się nie wczytują. Nie mam pojęcia, dlaczego tak się dzieje, ale jest to pierwszy taki przypadek.
Obecnie pracuję na Windows 7 32 bit z Outpost Firewall Pro w najnowszej wersji i MBAM Pro (ten na szczęście nie blokuje tych IP).
Dodam jeszcze, że korzystam z Opery z zainstalowanym Ghostery.
<EDIT>
Coś mi się wydaje, że to wina AdFendera, bo gdy go wyłączyłem forum odżyło. Aaaaa nie wiem, co z tym zrobić. Ma ktoś jakiś pomysł?
PS. Przepraszam, mój błąd. Zbyt szybko napisałem posta nie w tym wątku co trzeba. Administratora bądź moderatora proszę o wydzielenie postu do nowego wątku.
<EDIT>
Cyba znalazłem rozwiązanie, ale na początek małe wyjaśnienie. Napisałem, że problem trwa od wczoraj, fakt. Jednakże, problem dotyczy większości stron internetowych. Wczoraj wieczorem myślałem, że problemy z internetem występują z powodu nagłych wyładowań elektrycznych w postaci burzy. Do sieci podłączyłem się rzecz jasna po burzy.
Dzisiaj wchodzę na forum - problem istnieje.
Przeglądam inne strony - problem istnieje.
Strony były blokowane z powodu ustawienia blokowania ataków w Outpoście na maksymalnym poziomie i jednoczesnego blokowania reklam za pomocą AdFendera ver. 1.6
Rozwiązanie: wyłączyć AdFendera lub obniżyć blokowanie ataków w Outpost Firewall Pro na poziom optymalny.
<EDIT>
Pierwszy raz od kilku miesięcy Outpostowi się nie nudzi na moim komputerze. Kolejne zablokowane adresy IP:
91.228.198.240 Ten adres należy do... biznes-host.pl[19:05:51 91.228.198.240 Subnet blocked for 5 min SCAN (12541, 10493, 13821, 7933, 15101, 12797, 14077)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
netname:BIZNES-HOST-NET
descr:Biznes-Host.pl sp. z o.o.
country
L
org:ORG-BIZH1-RIPE
admin-c:BHNA1-RIPE
tech-c: BHNA1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower:RIPE-NCC-END-MNT
mnt-by: PERFEKT-NET-MNT
mnt-routes: PERFEKT-NET-MNT
mnt-domainsERFEKT-NET-MNT
source: RIPE #Filtered
organisation: ORG-BIZH1-RIPE
org-name: Biznes-Host.pl sp. z o.o.
org-type: OTHER
address:Grottgera 16/1
address:60-758 Poznan
addressoland
phone:+48 513077260
descr:for more information
tech-c: BHNA1-RIPE
mnt-refERFEKT-NET-MNT
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
role: Biznes-Host.pl Network Administrators
address:Grottgera 16/1
address:60-758 Poznan
addressoland
admin-c:TOMG1-RIPE
tech-c: TOMU1-RIPE
nic-hdl:BHNA1-RIPE
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
route:91.228.198.0/24
descr:Biznes-Host.pl sp. z o.o.
origin: AS198414
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
88.198.46.46[18:54:10 88.198.46.46 Subnet blocked for 5 min SCAN (52729, 57849, 58361, 58873, 59129, 58617, 57593)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
netname:HETZNER-RZ-NBG-NET
descr:Hetzner Online AG
descr
atacenter Nuernberg
countryE
admin-c:HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
mnt-lower:HOS-GUN
mnt-routes: HOS-GUN
source: RIPE #Filtered
role: Hetzner Online AG - Contact Role
address:Hetzner Online AG
address:Stuttgarter Stra�e 1
address-91710 Gunzenhausen
address:Germany
phone:+49 9831 61 00 61
fax-no: +49 9831 61 00 62
abuse-mailbox:<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e -->
remarks:*************************************************
remarks:* For spam/abuse/security issues please contact *
remarks:*<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> ,notthisaddress *
remarks:*************************************************
remarks:
remarks:*************************************************
remarks:*Any questions on Peering please send to*
remarks:*<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> *
remarks:*************************************************
org:ORG-HOA1-RIPE
admin-c:MH375-RIPE
tech-c: GM834-RIPE
tech-c: RB1502-RIPE
tech-c: SK2374-RIPE
tech-c: ND762-RIPE
tech-c: TF2013-RIPE
tech-c: MF1400-RIPE
nic-hdl:HOAC1-RIPE
mnt-by: HOS-GUN
source: RIPE #Filtered
route:88.198.0.0/16
descr:HETZNER-RZ-NBG-BLK4
origin: AS24940
org:ORG-HOA1-RIPE
mnt-by: HOS-GUN
source: RIPE #Filtered
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online AG
org-type: LIR
address:Hetzner Online AG Attn. Martin Hetzner Stuttgarter Str. 1 91710 Gunzenhausen GERMANY
phone:+49 9831 610061
fax-no: +49 9831 610062
admin-cM93-RIPE
admin-c:GM834-RIPE
admin-c:HOAC1-RIPE
admin-c:MH375-RIPE
admin-c:RB1502-RIPE
admin-c:SK2374-RIPE
admin-c:TF2013-RIPE
admin-c:MF1400-RIPE
mnt-ref:HOS-GUN
mnt-ref:RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE #Filtered
184.73.196.165[18:52:51 184.73.196.165 Subnet blocked for 5 min SCAN (49916, 51708, 52732, 50684, 51196, 50172, 59388)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
netname:IANA-BLK
descr:The whole IPv4 address space
country:EU #Country field is actually all countries in the world and not just EU countries
org:ORG-IANA1-RIPE
admin-c:IANA1-RIPE
tech-c: IANA1-RIPE
status: ALLOCATED UNSPECIFIED
remarks:This object represents all IPv4 addresses.
remarks:If you see this object as a result of a single IP query, it
remarks:means that the IP address you are querying is not managed by
remarks:the RIPE NCC but by one of the other five RIRs. It might
remarks:also be an address that has been reserved by the IETF as part
remarks:of a protocol or test range.
remarks:You can find the whois server to query, or the
remarks:IANA registry to query on this web page:
remarks:
mnt-lower:RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE #Filtered
organisation: ORG-IANA1-RIPE
org-name: Internet Assigned Numbers Authority
org-type: IANA
address:see
remarks:see
tech-c: IANA1-RIPE
mnt-ref:RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE #Filtered
role: Internet Assigned Numbers Authority
address:see
admin-c:IANA1-RIPE
tech-c: IANA1-RIPE
nic-hdl:IANA1-RIPE
remarks:For more information on IANA services
remarks:go to IANA web site at
mnt-by: RIPE-NCC-MNT
source: RIPE #Filtered
No i problem nadal występuje.
Czy ktoś ma pomysł skąd się bierze tyle skanowań portów i jak temu zaradzić?
Obecnie, żeby przeglądać forum i inne strony www, to muszę wyłączyć funkcję blokowania. Jednak to nie jest najlepszy pomysł.
Kolejne skanowanie portów ze strony biznes-host.pl:
20:20:52 91.228.198.240 Subnet blocked for 5 min SCAN (5572, 4036, 4292, 2244, 3268, 12996, 13252)
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
netname:BIZNES-HOST-NET
descr:Biznes-Host.pl sp. z o.o.
countryL
org:ORG-BIZH1-RIPE
admin-c:BHNA1-RIPE
tech-c: BHNA1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower:RIPE-NCC-END-MNT
mnt-by: PERFEKT-NET-MNT
mnt-routes: PERFEKT-NET-MNT
mnt-domainsERFEKT-NET-MNT
source: RIPE #Filtered
organisation: ORG-BIZH1-RIPE
org-name: Biznes-Host.pl sp. z o.o.
org-type: OTHER
address:Grottgera 16/1
address:60-758 Poznan
addressoland
phone:+48 513077260
descr:for more information
tech-c: BHNA1-RIPE
mnt-refERFEKT-NET-MNT
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
role: Biznes-Host.pl Network Administrators
address:Grottgera 16/1
address:60-758 Poznan
addressoland
admin-c:TOMG1-RIPE
tech-c: TOMU1-RIPE
nic-hdl:BHNA1-RIPE
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
route:91.228.198.0/24
descr:Biznes-Host.pl sp. z o.o.
origin: AS198414
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
Log:17:43:15 2.21.35.159 Subnet blocked for 5 min SCAN (13260, 16076, 15820)
17:43:15 2.21.35.159 Detected attack, host not blocked SINGLE_SCAN_PORT (13260)
17:43:13 92.122.244.191 Subnet blocked for 5 min SCAN (6860, 8652, 9676)
17:43:13 92.122.244.191 Detected attack, host not blocked SINGLE_SCAN_PORT (6860)
17:42:23 184.73.196.165 Subnet blocked for 5 min SCAN (51916, 52172, 56780)
17:42:09 184.73.196.165 Detected attack, host not blocked SINGLE_SCAN_PORT (51916)
17:41:26 2.21.60.20 Subnet blocked for 5 min SCAN (40907, 42699, 52171)
17:36:27 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (24012)
17:36:13 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (23244)
17:35:53 91.228.198.240 Subnet blocked for 5 min SCAN (61643, 3788, 63179)
17:35:48 50.17.220.219 Subnet blocked for 5 min SCAN (1228, 1484, 5580)
17:26:01 209.85.148.95 Detected attack, host not blocked SINGLE_SCAN_PORT (52938)
17:25:56 2.21.60.20 Detected attack, host not blocked SINGLE_SCAN_PORT (41674)
17:25:51 69.171.242.74 Detected attack, host not blocked SINGLE_SCAN_PORT (11723)
17:25:45 107.22.170.172 Subnet blocked for 5 min SCAN (30155, 30411, 31179)
17:25:24 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (18635)
17:24:51 23.21.215.52 Subnet blocked for 5 min SCAN (13259, 14539, 13771)
17:24:51 74.50.124.132 Subnet blocked for 5 min SCAN (6859, 3019, 5579)
17:24:51 74.50.124.132 Detected attack, host not blocked SINGLE_SCAN_PORT (6859)
17:24:00 77.109.171.96 Detected attack, host not blocked SINGLE_SCAN_PORT (12234)
17:24:00 77.109.171.162 Detected attack, host not blocked SINGLE_SCAN_PORT (9162)
17:23:07 91.228.198.240 Subnet blocked for 5 min SCAN (52682, 61130, 62410)
17:23:03 23.21.215.52 Detected attack, host not blocked SINGLE_SCAN_PORT (459)
17:21:59 91.228.198.240 Detected attack, host not blocked SINGLE_SCAN_PORT (52682)
17:21:55 107.22.170.172 Detected attack, host not blocked SINGLE_SCAN_PORT (54986)
17:12:10 184.73.196.165 Subnet blocked for 5 min SCAN (33224, 33480, 39112)
17:11:22 209.85.148.101 Detected attack, host not blocked SINGLE_SCAN_PORT (32711)
17:11:19 209.85.148.102 Detected attack, host not blocked SINGLE_SCAN_PORT (35527)
17:11:10 209.85.148.100 Detected attack, host not blocked SINGLE_SCAN_PORT (51143)
17:11:10 209.85.148.190 Detected attack, host not blocked SINGLE_SCAN_PORT (49351)
17:11:09 209.85.148.157 Detected attack, host not blocked SINGLE_SCAN_PORT (44231)
17:10:48 91.228.198.240 Detected attack, host not blocked SINGLE_SCAN_PORT (64711)
17:10:44 107.20.231.51 Detected attack, host not blocked SINGLE_SCAN_PORT (12232)
17:10:29 209.85.148.136 Detected attack, host not blocked SINGLE_SCAN_PORT (25287)
17:09:10 66.220.158.74 Subnet blocked for 5 min SCAN (23239, 24007, 47815)
17:08:29 66.220.158.74 Detected attack, host not blocked SINGLE_SCAN_PORT (23239)
17:08:10 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (49863, 50375)
17:04:42 91.228.198.240 Subnet blocked for 5 min SCAN (44486, 46022, 47558)
17:01:29 194.0.171.159 Subnet blocked for 5 min SCAN (27078, 32966, 27334)
17:01:29 194.0.171.152 Subnet blocked for 5 min SCAN (29126, 24262, 27590)
17:00:27 173.194.66.118 Subnet blocked for 5 min SCAN (37573, 37317, 38085)
17:00:08 209.85.148.132 Subnet blocked for 5 min SCAN (8645, 9157, 22725)
17:00:08 209.85.148.191 Subnet blocked for 5 min SCAN (17093, 17349, 16837)
16:58:10 77.109.171.107 Detected attack, host not blocked SINGLE_SCAN_PORT (11462)
16:58:09 173.194.35.167 Detected attack, host not blocked SINGLE_SCAN_PORT (41924)
16:58:09 173.194.35.168 Detected attack, host not blocked SINGLE_SCAN_PORT (42180)
16:58:09 173.194.65.118 Detected attack, host not blocked SINGLE_SCAN_PORT (41668)
16:58:08 69.63.189.74 Detected attack, host not blocked SINGLE_SCAN_PORT (15813)
16:58:03 72.233.111.159 Detected attack, host not blocked SINGLE_SCAN_PORT (59589)
16:57:55 77.109.171.115 Detected attack, host not blocked SINGLE_SCAN_PORT (10694)
16:57:50 107.20.231.51 Detected attack, host not blocked SINGLE_SCAN_PORT (5318)
16:57:50 107.22.163.248 Subnet blocked for 5 min SCAN (6086, 5062, 6854)
16:57:50 107.22.163.248 Detected attack, host not blocked SINGLE_SCAN_PORT (6086)
16:57:09 50.17.220.219 Subnet blocked for 5 min SCAN (7109, 30405, 31685)
16:56:35 50.17.220.219 Detected attack, host not blocked SINGLE_SCAN_PORT (7109)
16:39:18 91.203.96.252 Detected attack, host not blocked SINGLE_SCAN_PORT (26820)
16:26:16 77.109.171.48 Detected attack, host not blocked SINGLE_SCAN_PORT (27075)
16:26:16 77.109.171.25 Detected attack, host not blocked SINGLE_SCAN_PORT (45251)
16:26:16 77.67.20.41 Detected attack, host not blocked SINGLE_SCAN_PORT (43971)
16:22:54 91.203.99.45 Detected attack, host not blocked SINGLE_SCAN_PORT (8387)
16:22:24 199.7.59.190 Detected attack, host not blocked SINGLE_SCAN_PORT (27587)
16:19:41 77.109.171.10 Subnet blocked for 5 min SCAN (50625, 52929, 18881)
16:18:58 50.17.214.94 Subnet blocked for 5 min SCAN (57795, 58051, 58563)
16:18:56 89.161.250.16 Subnet blocked for 5 min SCAN (34499, 34243, 36291)
16:15:44 173.194.65.102 Subnet blocked for 5 min SCAN (35777, 36033, 38338)
16:15:10 173.194.66.147 Subnet blocked for 5 min SCAN (25025, 24769, 24513)
16:13:35 77.79.216.111 Subnet blocked for 5 min SCAN (61377, 4034, 3522)
16:12:54 77.109.171.121 Subnet blocked for 5 min SCAN (44225, 43457, 43201)
16:12:45 94.127.76.180 Subnet blocked for 5 min SCAN (21953, 29634, 33218)
16:12:17 77.109.171.107 Subnet blocked for 5 min SCAN (44481, 43969, 42945)
16:12:11 184.73.187.64 Subnet blocked for 5 min SCAN (52160, 32705, 34753)
16:12:09 77.109.171.121 Detected attack, host not blocked SINGLE_SCAN_PORT (44225)
16:12:08 77.109.171.107 Detected attack, host not blocked SINGLE_SCAN_PORT (44481)
16:12:04 107.22.184.229 Detected attack, host not blocked SINGLE_SCAN_PORT (51904)
16:12:04 184.73.187.64 Detected attack, host not blocked SINGLE_SCAN_PORT (52160)
16:12:04 107.22.170.172 Detected attack, host not blocked SINGLE_SCAN_PORT (51392)
16:12:04 50.18.181.128 Detected attack, host not blocked SINGLE_SCAN_PORT (38592)
16:12:03 2.21.47.139 Detected attack, host not blocked SINGLE_SCAN_PORT (62913)
16:11:55 69.73.144.49 Detected attack, host not blocked SINGLE_SCAN_PORT (21440)
16:11:54 23.61.255.195 Detected attack, host not blocked SINGLE_SCAN_PORT (53697)
16:11:47 174.122.73.35 Detected attack, host not blocked SINGLE_SCAN_PORT (7104)
W czasie blokowania IP strony forum się nie wczytują. Nie mam pojęcia, dlaczego tak się dzieje, ale jest to pierwszy taki przypadek.
Obecnie pracuję na Windows 7 32 bit z Outpost Firewall Pro w najnowszej wersji i MBAM Pro (ten na szczęście nie blokuje tych IP).
Dodam jeszcze, że korzystam z Opery z zainstalowanym Ghostery.
<EDIT>
Coś mi się wydaje, że to wina AdFendera, bo gdy go wyłączyłem forum odżyło. Aaaaa nie wiem, co z tym zrobić. Ma ktoś jakiś pomysł?
PS. Przepraszam, mój błąd. Zbyt szybko napisałem posta nie w tym wątku co trzeba. Administratora bądź moderatora proszę o wydzielenie postu do nowego wątku.
<EDIT>
Cyba znalazłem rozwiązanie, ale na początek małe wyjaśnienie. Napisałem, że problem trwa od wczoraj, fakt. Jednakże, problem dotyczy większości stron internetowych. Wczoraj wieczorem myślałem, że problemy z internetem występują z powodu nagłych wyładowań elektrycznych w postaci burzy. Do sieci podłączyłem się rzecz jasna po burzy.
Dzisiaj wchodzę na forum - problem istnieje.
Przeglądam inne strony - problem istnieje.
Strony były blokowane z powodu ustawienia blokowania ataków w Outpoście na maksymalnym poziomie i jednoczesnego blokowania reklam za pomocą AdFendera ver. 1.6
Rozwiązanie: wyłączyć AdFendera lub obniżyć blokowanie ataków w Outpost Firewall Pro na poziom optymalny.
<EDIT>
Pierwszy raz od kilku miesięcy Outpostowi się nie nudzi na moim komputerze. Kolejne zablokowane adresy IP:
91.228.198.240 Ten adres należy do... biznes-host.pl[19:05:51 91.228.198.240 Subnet blocked for 5 min SCAN (12541, 10493, 13821, 7933, 15101, 12797, 14077)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
[Aby zobaczyć linki, zarejestruj się tutaj]
inetnum:91.228.196.0 - 91.228.199.255netname:BIZNES-HOST-NET
descr:Biznes-Host.pl sp. z o.o.
country
Lorg:ORG-BIZH1-RIPE
admin-c:BHNA1-RIPE
tech-c: BHNA1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower:RIPE-NCC-END-MNT
mnt-by: PERFEKT-NET-MNT
mnt-routes: PERFEKT-NET-MNT
mnt-domains
ERFEKT-NET-MNTsource: RIPE #Filtered
organisation: ORG-BIZH1-RIPE
org-name: Biznes-Host.pl sp. z o.o.
org-type: OTHER
address:Grottgera 16/1
address:60-758 Poznan
address
olandphone:+48 513077260
descr:for more information
[Aby zobaczyć linki, zarejestruj się tutaj]
admin-c:BHNA1-RIPEtech-c: BHNA1-RIPE
mnt-ref
ERFEKT-NET-MNTmnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
role: Biznes-Host.pl Network Administrators
address:Grottgera 16/1
address:60-758 Poznan
address
olandadmin-c:TOMG1-RIPE
tech-c: TOMU1-RIPE
nic-hdl:BHNA1-RIPE
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
route:91.228.198.0/24
descr:Biznes-Host.pl sp. z o.o.
origin: AS198414
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
88.198.46.46[18:54:10 88.198.46.46 Subnet blocked for 5 min SCAN (52729, 57849, 58361, 58873, 59129, 58617, 57593)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
[Aby zobaczyć linki, zarejestruj się tutaj]
inetnum:88.198.32.0 - 88.198.63.255netname:HETZNER-RZ-NBG-NET
descr:Hetzner Online AG
descr
atacenter Nuernbergcountry
Eadmin-c:HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
mnt-lower:HOS-GUN
mnt-routes: HOS-GUN
source: RIPE #Filtered
role: Hetzner Online AG - Contact Role
address:Hetzner Online AG
address:Stuttgarter Stra�e 1
address
-91710 Gunzenhausenaddress:Germany
phone:+49 9831 61 00 61
fax-no: +49 9831 61 00 62
abuse-mailbox:<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e -->
remarks:*************************************************
remarks:* For spam/abuse/security issues please contact *
remarks:*<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> ,notthisaddress *
remarks:*************************************************
remarks:
remarks:*************************************************
remarks:*Any questions on Peering please send to*
remarks:*<!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> *
remarks:*************************************************
org:ORG-HOA1-RIPE
admin-c:MH375-RIPE
tech-c: GM834-RIPE
tech-c: RB1502-RIPE
tech-c: SK2374-RIPE
tech-c: ND762-RIPE
tech-c: TF2013-RIPE
tech-c: MF1400-RIPE
nic-hdl:HOAC1-RIPE
mnt-by: HOS-GUN
source: RIPE #Filtered
route:88.198.0.0/16
descr:HETZNER-RZ-NBG-BLK4
origin: AS24940
org:ORG-HOA1-RIPE
mnt-by: HOS-GUN
source: RIPE #Filtered
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online AG
org-type: LIR
address:Hetzner Online AG Attn. Martin Hetzner Stuttgarter Str. 1 91710 Gunzenhausen GERMANY
phone:+49 9831 610061
fax-no: +49 9831 610062
admin-c
M93-RIPEadmin-c:GM834-RIPE
admin-c:HOAC1-RIPE
admin-c:MH375-RIPE
admin-c:RB1502-RIPE
admin-c:SK2374-RIPE
admin-c:TF2013-RIPE
admin-c:MF1400-RIPE
mnt-ref:HOS-GUN
mnt-ref:RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE #Filtered
184.73.196.165[18:52:51 184.73.196.165 Subnet blocked for 5 min SCAN (49916, 51708, 52732, 50684, 51196, 50172, 59388)]
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
[Aby zobaczyć linki, zarejestruj się tutaj]
inetnum:0.0.0.0 - 255.255.255.255netname:IANA-BLK
descr:The whole IPv4 address space
country:EU #Country field is actually all countries in the world and not just EU countries
org:ORG-IANA1-RIPE
admin-c:IANA1-RIPE
tech-c: IANA1-RIPE
status: ALLOCATED UNSPECIFIED
remarks:This object represents all IPv4 addresses.
remarks:If you see this object as a result of a single IP query, it
remarks:means that the IP address you are querying is not managed by
remarks:the RIPE NCC but by one of the other five RIRs. It might
remarks:also be an address that has been reserved by the IETF as part
remarks:of a protocol or test range.
remarks:You can find the whois server to query, or the
remarks:IANA registry to query on this web page:
remarks:
[Aby zobaczyć linki, zarejestruj się tutaj]
mnt-by: RIPE-NCC-HM-MNTmnt-lower:RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE #Filtered
organisation: ORG-IANA1-RIPE
org-name: Internet Assigned Numbers Authority
org-type: IANA
address:see
[Aby zobaczyć linki, zarejestruj się tutaj]
remarks:The IANA allocates IP addresses and AS number blocks to RIRsremarks:see
[Aby zobaczyć linki, zarejestruj się tutaj]
remarks:and[Aby zobaczyć linki, zarejestruj się tutaj]
admin-c:IANA1-RIPEtech-c: IANA1-RIPE
mnt-ref:RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE #Filtered
role: Internet Assigned Numbers Authority
address:see
[Aby zobaczyć linki, zarejestruj się tutaj]
.admin-c:IANA1-RIPE
tech-c: IANA1-RIPE
nic-hdl:IANA1-RIPE
remarks:For more information on IANA services
remarks:go to IANA web site at
[Aby zobaczyć linki, zarejestruj się tutaj]
.mnt-by: RIPE-NCC-MNT
source: RIPE #Filtered
No i problem nadal występuje.
Czy ktoś ma pomysł skąd się bierze tyle skanowań portów i jak temu zaradzić?
Obecnie, żeby przeglądać forum i inne strony www, to muszę wyłączyć funkcję blokowania. Jednak to nie jest najlepszy pomysł.
Kolejne skanowanie portów ze strony biznes-host.pl:
20:20:52 91.228.198.240 Subnet blocked for 5 min SCAN (5572, 4036, 4292, 2244, 3268, 12996, 13252)
This is the RIPE Database search service.
The objects are in RPSL format.
The RIPE Database is subject to Terms and Conditions.
See
[Aby zobaczyć linki, zarejestruj się tutaj]
inetnum:91.228.196.0 - 91.228.199.255netname:BIZNES-HOST-NET
descr:Biznes-Host.pl sp. z o.o.
country
Lorg:ORG-BIZH1-RIPE
admin-c:BHNA1-RIPE
tech-c: BHNA1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower:RIPE-NCC-END-MNT
mnt-by: PERFEKT-NET-MNT
mnt-routes: PERFEKT-NET-MNT
mnt-domains
ERFEKT-NET-MNTsource: RIPE #Filtered
organisation: ORG-BIZH1-RIPE
org-name: Biznes-Host.pl sp. z o.o.
org-type: OTHER
address:Grottgera 16/1
address:60-758 Poznan
address
olandphone:+48 513077260
descr:for more information
[Aby zobaczyć linki, zarejestruj się tutaj]
admin-c:BHNA1-RIPEtech-c: BHNA1-RIPE
mnt-ref
ERFEKT-NET-MNTmnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
role: Biznes-Host.pl Network Administrators
address:Grottgera 16/1
address:60-758 Poznan
address
olandadmin-c:TOMG1-RIPE
tech-c: TOMU1-RIPE
nic-hdl:BHNA1-RIPE
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered
route:91.228.198.0/24
descr:Biznes-Host.pl sp. z o.o.
origin: AS198414
mnt-by: PERFEKT-NET-MNT
source: RIPE #Filtered