Автор |
Сообщение |
lisha
Новичок
|
отправлено: 08-02-2013 11:51:46 |
|
На размышление: Решил включить фаервол на роутере,(был выключен что бы меньше на роутер давил) через пару минут увидел вот это [spoiler]# Time Message Source Destination Note 1 08/02/2013 10:42:04 Firewall default policy: TCP (L to W) 192.168.1.2:50799 87.240.134.61:80 ACCESS FORWARD 2 08/02/2013 10:41:57 Firewall default policy: TCP (L to W) 192.168.1.2:50797 87.240.134.61:80 ACCESS FORWARD 3 08/02/2013 10:41:57 Firewall default policy: UDP (L to W) 192.168.1.2:61322 192.168.2.20:53 ACCESS FORWARD 4 08/02/2013 10:41:49 Firewall rule match: TCP (W to L, rule:2) 89.251.150.45:63959 192.168.1.2:6881 ACCESS FORWARD 5 08/02/2013 10:41:48 Firewall rule match: TCP (W to L, rule:2) 89.251.150.45:63959 192.168.1.2:6881 ACCESS FORWARD 6 08/02/2013 10:41:48 Firewall rule match: TCP (W to L, rule:2) 89.251.150.45:63959 192.168.1.2:6881 ACCESS FORWARD 7 08/02/2013 10:41:46 Firewall rule match: UDP (W to L, rule:2) 89.251.150.45:6881 192.168.1.2:6881 ACCESS FORWARD 8 08/02/2013 10:41:43 Firewall rule match: TCP (W to L, rule:2) 178.165.29.155:49773 192.168.1.2:31625 ACCESS FORWARD 9 08/02/2013 10:41:43 Firewall rule match: UDP (W to L, rule:2) 89.251.150.45:6881 192.168.1.2:6881 ACCESS FORWARD 10 08/02/2013 10:41:37 Firewall default policy: TCP (L to W) 192.168.1.2:50796 87.240.131.120:80 ACCESS FORWARD 11 08/02/2013 10:41:37 Firewall default policy: UDP (L to W) 192.168.1.2:52277 192.168.2.20:53 ACCESS FORWARD 12 08/02/2013 10:41:35 Firewall rule match: UDP (W to L, rule:2) 95.71.249.31:17521 192.168.1.2:39169 ACCESS FORWARD 13 08/02/2013 10:41:33 Firewall rule match: UDP (W to L, rule:2) 125.27.60.5:27216 192.168.1.2:16949 ACCESS FORWARD 14 08/02/2013 10:41:31 Firewall default policy: TCP (L to W) 192.168.1.2:50795 87.240.134.141:80 ACCESS FORWARD 15 08/02/2013 10:41:21 Firewall rule match: UDP (W to L, rule:2) 31.162.194.12:34757 192.168.1.2:16949 ACCESS FORWARD 16 08/02/2013 10:41:06 Firewall default policy: TCP (L to W) 192.168.1.2:50791 87.240.134.141:80 ACCESS FORWARD 17 08/02/2013 10:41:02 Firewall default policy: TCP (L to W) 192.168.1.2:50790 173.194.47.133:80 ACCESS FORWARD 18 08/02/2013 10:41:01 Firewall default policy: TCP (L to W) 192.168.1.2:50789 173.194.47.133:80 ACCESS FORWARD 19 08/02/2013 10:40:59 Firewall default policy: TCP (L to W) 192.168.1.2:50788 173.194.47.133:80 ACCESS FORWARD 20 08/02/2013 10:40:56 Firewall default policy: TCP (L to W) 192.168.1.2:50787 173.194.33.15:80 ACCESS FORWARD 21 08/02/2013 10:40:56 Firewall default policy: TCP (L to W) 192.168.1.2:50786 173.194.47.143:80 ACCESS FORWARD 22 08/02/2013 10:40:56 Firewall default policy: TCP (L to W) 192.168.1.2:50785 173.194.47.133:80 ACCESS FORWARD 23 08/02/2013 10:40:55 Firewall default policy: TCP (L to W) 192.168.1.2:50784 173.194.47.133:80 ACCESS FORWARD 24 08/02/2013 10:40:52 Firewall rule match: UDP (W to L, rule:2) 99.97.93.197:48963 192.168.1.2:16949 ACCESS FORWARD 25 08/02/2013 10:40:50 Firewall default policy: TCP (L to W) 192.168.1.2:50783 173.194.33.15:80 ACCESS FORWARD 26 08/02/2013 10:40:50 Firewall default policy: TCP (L to W) 192.168.1.2:50782 173.194.47.143:80 ACCESS FORWARD 27 08/02/2013 10:40:50 Firewall default policy: TCP (L to W) 192.168.1.2:50781 173.194.47.133:80 ACCESS FORWARD 28 08/02/2013 10:40:50 Firewall default policy: TCP (L to W) 192.168.1.2:50780 173.194.47.133:80 ACCESS FORWARD 29 08/02/2013 10:40:47 Firewall default policy: TCP (L to W) 192.168.1.2:50779 173.194.47.133:80 ACCESS FORWARD 30 08/02/2013 10:40:45 Firewall default policy: TCP (L to W) 192.168.1.2:50778 173.194.33.15:80 ACCESS FORWARD 31 08/02/2013 10:40:45 Firewall default policy: TCP (L to W) 192.168.1.2:50777 173.194.47.133:80 ACCESS FORWARD 32 08/02/2013 10:40:45 Firewall rule match: TCP (W to L, rule:2) 46.175.147.40:63363 192.168.1.2:6881 ACCESS FORWARD 33 08/02/2013 10:40:44 Firewall rule match: TCP (W to L, rule:2) 46.175.147.40:63363 192.168.1.2:6881 ACCESS FORWARD 34 08/02/2013 10:40:43 Firewall rule match: TCP (W to L, rule:2) 46.175.147.40:63363 192.168.1.2:6881 ACCESS FORWARD 35 08/02/2013 10:40:43 Firewall default policy: TCP (L to W) 192.168.1.2:50776 173.194.47.133:80 ACCESS FORWARD 36 08/02/2013 10:40:43 Firewall default policy: TCP (L to W) 192.168.1.2:50775 173.194.33.15:80 ACCESS FORWARD 37 08/02/2013 10:40:43 Firewall default policy: UDP (L to W) 192.168.1.2:64902 192.168.2.20:53 ACCESS FORWARD 38 08/02/2013 10:40:43 Firewall default policy: TCP (L to W) 192.168.1.2:50774 173.194.47.133:80 ACCESS FORWARD 39 08/02/2013 10:40:42 Firewall default policy: UDP (L to W) 192.168.1.2:57904 192.168.2.20:53 ACCESS FORWARD 40 08/02/2013 10:40:42 Firewall rule match: UDP (W to L, rule:2) 46.175.147.40:6881 192.168.1.2:6881 ACCESS FORWARD 41 08/02/2013 10:40:42 Firewall default policy: UDP (L to W) 192.168.1.2:57034 192.168.2.20:53 ACCESS FORWARD 42 08/02/2013 10:40:41 Firewall default policy: UDP (L to W) 192.168.1.2:54543 192.168.2.20:53 ACCESS FORWARD 43 08/02/2013 10:40:41 Firewall default policy: TCP (L to W) 192.168.1.2:50773 87.240.134.141:80 ACCESS FORWARD 44 08/02/2013 10:40:39 Firewall rule match: UDP (W to L, rule:2) 46.175.147.40:6881 192.168.1.2:6881 ACCESS FORWARD 45 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50772 173.194.47.143:80 ACCESS FORWARD 46 08/02/2013 10:40:37 Firewall default policy: UDP (L to W) 192.168.1.2:49326 192.168.2.20:53 ACCESS FORWARD 47 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50771 173.194.47.143:80 ACCESS FORWARD 48 08/02/2013 10:40:37 Firewall default policy: UDP (L to W) 192.168.1.2:50658 192.168.2.20:53 ACCESS FORWARD 49 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50770 74.125.143.94:80 ACCESS FORWARD 50 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50769 74.125.143.94:80 ACCESS FORWARD 51 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50768 74.125.143.94:80 ACCESS FORWARD 52 08/02/2013 10:40:37 Firewall default policy: TCP (L to W) 192.168.1.2:50767 74.125.143.94:80 ACCESS FORWARD 53 08/02/2013 10:40:36 Firewall default policy: TCP (L to W) 192.168.1.2:50766 91.203.99.45:80 ACCESS FORWARD 54 08/02/2013 10:40:36 Firewall default policy: TCP (L to W) 192.168.1.2:50765 74.125.143.94:80 ACCESS FORWARD 55 08/02/2013 10:40:36 Firewall default policy: UDP (L to W) 192.168.1.2:63412 192.168.2.20:53 ACCESS FORWARD 56 08/02/2013 10:40:36 Firewall default policy: TCP (L to W) 192.168.1.2:50764 91.203.99.45:80 ACCESS FORWARD 57 08/02/2013 10:40:36 Firewall default policy: TCP (L to W) 192.168.1.2:50763 74.125.143.94:80 ACCESS FORWARD 58 08/02/2013 10:40:36 Firewall default policy: UDP (L to W) 192.168.1.2:62407 192.168.2.20:53 ACCESS FORWARD 59 08/02/2013 10:40:18 Firewall rule match: UDP (W to L, rule:2) 78.132.239.203:25609 192.168.1.2:40082 ACCESS FORWARD 60 08/02/2013 10:40:16 Firewall default policy: TCP (L to W) 192.168.1.2:50762 87.240.134.141:80 ACCESS FORWARD 61 08/02/2013 10:40:15 Firewall rule match: UDP (W to L, rule:2) 203.115.141.180:61041 192.168.1.2:16949 ACCESS FORWARD 62 08/02/2013 10:40:12 Firewall rule match: UDP (W to L, rule:2) 213.5.165.12:36263 192.168.1.2:40082 ACCESS FORWARD 63 08/02/2013 10:39:57 Firewall rule match: UDP (W to L, rule:2) 46.236.133.240:24475 192.168.1.2:16949 ACCESS FORWARD 64 08/02/2013 10:39:51 Firewall default policy: TCP (L to W) 192.168.1.2:50761 87.240.134.141:80 ACCESS FORWARD 65 08/02/2013 10:39:51 Firewall rule match: UDP (W to L, rule:2) 119.93.146.83:61890 192.168.1.2:16949 ACCESS FORWARD 66 08/02/2013 10:39:49 Firewall default policy: TCP (L to W) 192.168.1.2:50760 87.240.134.141:80 ACCESS FORWARD 67 08/02/2013 10:39:49 Peer TCP state out of order, sent TCP RST 192.168.1.2:50755 93.158.134.119:80 TCP RST 68 08/02/2013 10:39:37 Firewall rule match: UDP (W to L, rule:2) 24.1.37.115:63171 192.168.1.2:16949 ACCESS FORWARD 69 08/02/2013 10:39:30 Firewall rule match: UDP (W to L, rule:2) 213.87.142.12:37615 192.168.1.2:6881 ACCESS FORWARD 70 08/02/2013 10:39:24 Firewall default policy: TCP (L to W) 192.168.1.2:50758 87.240.134.141:80 ACCESS FORWARD 71 08/02/2013 10:39:23 Firewall rule match: UDP (W to L, rule:2) 176.49.129.186:6881 192.168.1.2:6881 ACCESS FORWARD 72 08/02/2013 10:39:16 Firewall rule match: UDP (W to L, rule:2) 5.100.98.121:44059 192.168.1.2:16949 ACCESS FORWARD 73 08/02/2013 10:39:13 Firewall default policy: TCP (L to W) 192.168.1.2:50757 87.240.134.141:80 ACCESS FORWARD 74 08/02/2013 10:39:06 Firewall default policy: TCP (L to W) 192.168.1.2:50756 93.158.134.119:80 ACCESS FORWARD 75 08/02/2013 10:39:03 Firewall rule match: UDP (W to L, rule:2) 87.198.122.30:64063 192.168.1.2:16949 ACCESS FORWARD 76 08/02/2013 10:38:49 Firewall default policy: TCP (L to W) 192.168.1.2:50755 93.158.134.119:80 ACCESS FORWARD 77 08/02/2013 10:38:48 Firewall default policy: TCP (L to W) 192.168.1.2:50754 87.240.134.141:80 ACCESS FORWARD 78 08/02/2013 10:38:43 Firewall default policy: UDP (L to W) 192.168.1.2:64392 192.168.2.20:53 ACCESS FORWARD 79 08/02/2013 10:38:38 Firewall default policy: TCP (L to W) 192.168.1.2:50753 87.240.134.141:80 ACCESS FORWARD 80 08/02/2013 10:38:37 Peer TCP state out of order, sent TCP RST 192.168.1.2:50740 87.240.143.244:80 TCP RST 81 08/02/2013 10:38:37 Firewall default policy: TCP (L to W) 192.168.1.2:50752 87.240.143.244:80 ACCESS FORWARD 82 08/02/2013 10:38:22 Firewall rule match: UDP (W to L, rule:2) 88.111.159.154:14727 192.168.1.2:34193 ACCESS FORWARD 83 08/02/2013 10:38:19 Firewall rule match: UDP (W to L, rule:2) 78.215.69.208:26085 192.168.1.2:16949 ACCESS FORWARD 84 08/02/2013 10:38:16 Firewall default policy: TCP (L to W) 192.168.1.2:50751 87.240.134.141:80 ACCESS FORWARD 85 08/02/2013 10:38:15 Firewall default policy: TCP (L to W) 192.168.1.2:50750 93.158.134.119:80 ACCESS FORWARD 86 08/02/2013 10:38:10 Firewall rule match: TCP (W to L, rule:2) 178.169.93.173:2536 192.168.1.2:40082 ACCESS FORWARD 87 08/02/2013 10:38:10 Firewall rule match: TCP (W to L, rule:2) 178.169.93.173:2536 192.168.1.2:40082 ACCESS FORWARD 88 08/02/2013 10:38:09 Firewall rule match: TCP (W to L, rule:2) 178.169.93.173:2536 192.168.1.2:40082 ACCESS FORWARD 89 08/02/2013 10:38:08 Firewall rule match: TCP (W to L, rule:2) 46.160.118.67:50989 192.168.1.2:64331 ACCESS FORWARD 90 08/02/2013 10:38:08 Firewall rule match: TCP (W to L, rule:2) 46.160.118.67:50989 192.168.1.2:64331 ACCESS FORWARD 91 08/02/2013 10:38:07 Firewall rule match: TCP (W to L, rule:2) 46.160.118.67:50989 192.168.1.2:64331 ACCESS FORWARD 92 08/02/2013 10:38:07 Firewall rule match: UDP (W to L, rule:2) 83.110.55.132:19645 192.168.1.2:16949 ACCESS FORWARD 93 08/02/2013 10:37:59 Firewall default policy: TCP (L to W) 192.168.1.2:50749 93.158.134.119:80 ACCESS FORWARD 94 08/02/2013 10:37:53 Firewall rule match: UDP (W to L, rule:2) 85.252.214.214:49302 192.168.1.2:16949 ACCESS FORWARD 95 08/02/2013 10:37:51 Firewall rule match: UDP (W to L, rule:2) 92.242.73.71:58908 192.168.1.2:16949 ACCESS FORWARD 96 08/02/2013 10:37:50 Firewall default policy: TCP (L to W) 192.168.1.2:50748 87.240.134.141:80 ACCESS FORWARD 97 08/02/2013 10:37:45 Firewall rule match: UDP (W to L, rule:2) 81.30.56.99:26342 192.168.1.2:40082 ACCESS FORWARD 98 08/02/2013 10:37:45 Firewall default policy: TCP (L to W) 192.168.1.2:50747 23.62.98.162:443 ACCESS FORWARD 99 08/02/2013 10:37:45 Firewall default policy: TCP (L to W) 192.168.1.2:50746 23.62.99.113:443 ACCESS FORWARD 100 08/02/2013 10:37:45 Firewall default policy: TCP (L to W) 192.168.1.2:50745 23.62.99.113:443 ACCESS FORWARD 101 08/02/2013 10:37:45 Firewall default policy: TCP (L to W) 192.168.1.2:50744 23.62.99.113:443 ACCESS FORWARD 102 08/02/2013 10:37:45 Firewall default policy: TCP (L to W) 192.168.1.2:50743 23.62.99.113:443 ACCESS FORWARD 103 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:61179 192.168.2.20:53 ACCESS FORWARD 104 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50742 74.125.143.147:80 ACCESS FORWARD 105 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50741 93.158.134.119:80 ACCESS FORWARD 106 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:65519 192.168.2.20:53 ACCESS FORWARD 107 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50740 87.240.143.244:80 ACCESS FORWARD 108 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50739 23.62.99.113:443 ACCESS FORWARD 109 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50738 23.62.99.113:443 ACCESS FORWARD 110 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50737 193.169.234.232:80 ACCESS FORWARD 111 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:64204 192.168.2.20:53 ACCESS FORWARD 112 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50736 88.212.196.75:80 ACCESS FORWARD 113 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50735 178.132.204.164:80 ACCESS FORWARD 114 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50734 178.132.204.164:80 ACCESS FORWARD 115 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:49445 192.168.2.20:53 ACCESS FORWARD 116 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50733 178.132.204.164:80 ACCESS FORWARD 117 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50732 178.132.204.164:80 ACCESS FORWARD 118 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50731 178.132.204.164:80 ACCESS FORWARD 119 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50730 193.169.234.232:80 ACCESS FORWARD 120 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:52376 192.168.2.20:53 ACCESS FORWARD 121 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50729 178.132.204.164:80 ACCESS FORWARD 122 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50728 91.203.99.45:443 ACCESS FORWARD 123 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:63721 192.168.2.20:53 ACCESS FORWARD 124 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50727 23.62.114.110:443 ACCESS FORWARD 125 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50726 23.62.99.88:80 ACCESS FORWARD 126 08/02/2013 10:37:44 Firewall default policy: TCP (L to W) 192.168.1.2:50725 192.102.6.123:80 ACCESS FORWARD 127 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:63376 192.168.2.20:53 ACCESS FORWARD 128 08/02/2013 10:37:44 Firewall default policy: UDP (L to W) 192.168.1.2:56753 192.168.2.20:53 ACCESS FORWARD[/spoiler] из того что вижу понимаю что мой комп постоянно кудато долбиться, (скорее вирусняк у меня), но и ко мне постоянно кто-то долбиться, на этот момент торент вырублен, аська выключена еинственное запущен радмин (немогу настроить по локалке конечусь а по инет адресу никак) и удаленный рабочий стол... статистику запросов по адресам в нетапе возможно выгрузить? |
|
|
lisha
Новичок
|
отправлено: 08-02-2013 11:53:27 |
|
А здеся спойлер не работает чтоли? |
|
|
Black&High
Участник
funky basslines
|
отправлено: 08-02-2013 12:17:51 |
|
To lisha цитата: 192.168.2.20:53 это наш днс. а остальные - это инет-адреса, я их наизусть не знаю... |
|
|
lisha
Новичок
|
отправлено: 08-02-2013 12:42:59 |
|
To Black&High Эт я знаю ))) ПО 53 порту понятно что запросы к днс идут, 80 типо лазию по сайтам 443 по https, а вот остальные сумашедшие порты похожы на торент, но у мя он точно отключен... и по сайтам я не лазил в этот момент, (думаю вирусня), меня смущает что ко мне долбяться из вне.... ПО ЮДП 81.30.56.99:26342 92.242.73.71:58908 иль тсп 178.169.93.173:2536 |
|
|
lisha
Новичок
|
отправлено: 08-02-2013 12:43:25 |
|
и приэтом ACCESS FORWARD - насколько знаю типо разрешен доступ |
|
|
lisha
Новичок
|
отправлено: 09-02-2013 17:07:00 |
|
тема без осуждений? Дорогие сотрудники ФГИЦ, есть ваши предположения? идеи? |
|
|
old_pepper
Участник
|
отправлено: 10-02-2013 17:51:40 |
|
To lisha Для XP: netstat -a netstat -b tasklist -v |
|
|
lisha
Новичок
|
отправлено: 11-02-2013 10:42:35 |
|
To old_pepper Это то что на моем компе, Кстати они не только для хрюши, на висте и семерке тоже годны))) |
|
|
iFTP
Участник
|
отправлено: 14-02-2013 09:39:43 |
|
To lisha торрент? ![](/images/smiles/biggrin.gif) |
|
|
opereezde.ru
Новичок
8-926-386-00-11
|
отправлено: 15-02-2013 17:39:31 |
|
по логам вижу что любишь качать парнуху с торрентов |
|
|
lisha
Новичок
|
отправлено: 21-02-2013 13:15:26 |
|
To opereezde.ru О да, зачем качать когда можно онлайн смотреть на достовереных сайтах ))) To opereezde.ru To iFTP Я написал цитата: на этот момент торент вырублен, аська выключена еинственное запущен радмин (немогу настроить по локалке конечусь а по инет адресу никак) и удаленный рабочий стол... По поводу адресов и netstat -b To old_pepper Картина более проясниеться, выключить квип, через пару менут он в списке даной команды будет висеть подобно такой записи [qip.exe] TCP 192.168.1.2:55986 mrim31:2041 ESTABLISHED [qip.exe] TCP 192.168.1.2:55988 sans:5222 ESTABLISHED [qip.exe] TCP 192.168.1.2:55989 91.190.218.65:12350 ESTABLISHED а в процесах его нету... |
|
|
|
|