- Anzeige -

Horizon meldet Firewall Warnungen

Hier geht es um die technischen Geräte zum Empfang des digitalen Fernsehens.

Horizon meldet Firewall Warnungen

Beitragvon uschgu » 08.03.2016, 21:26

Hallo liebes Forum,

ich habe ein sehr seltsames "Problem" und bisher habe ich weder über Google, noch bei Unitymedia oder mit der SuFu hier einen Hinweis finden können...
Und zwar kann ich seit ein paar Wochen im Logfile meines Horizon HD Recorder haufenweise Warnungen bzgl. IP-Flooding und Port-Scans finden. Ich dachte zuerst, dass ich mir einen Virus eingefangen habe, aber die Meldungen erscheinen auch, wenn mein PC ausgeschaltet ist.
Was dabei noch viel seltsamer ist, ist dass weder die gemeldeten Ausgangs-, noch die Empänger-IP-Adressen in meinem Netzwerk liegen. :confused:

Hier mal ein aktueller Auszug:
Code: Alles auswählen
Mar  8 20:09:40: [Minor] Port Scan is detected (103.103.47.171:34721->95.95.223.205:23 TCP) from module Firewall
Mar  8 20:08:52: [Minor] Port Scan is detected (110.110.187.205:42905->95.95.223.205:23 TCP) from module Firewall
Mar  8 20:06:49: [Minor] Port Scan is detected (209.209.126.116:42670->95.95.223.205:873 TCP) from module Firewall
Mar  8 20:06:17: [Minor] Port Scan is detected (95.95.208.208:46177->95.95.223.205:80 TCP) from module Firewall
Mar  8 20:01:51: [Minor] Port Scan is detected (124.124.28.54:2592->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:56:31: [Minor] Port Scan is detected (123.123.205.48:48604->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:56:29: [Minor] Port Scan is detected (117.117.66.21:13505->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:55:14: [Minor] Port Scan is detected (113.113.77.163:26195->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:52:42: [Minor] Port Scan is detected (118.118.213.11:41985->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:51:32: [Minor] Port Scan is detected (183.183.83.136:40663->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:47:50: [Minor] Port Scan is detected (74.74.208.69:49717->95.95.223.205:8649 TCP) from module Firewall
Mar  8 19:41:48: [Minor] Port Scan is detected (106.106.39.60:8082->95.95.223.205:443 TCP) from module Firewall
Mar  8 19:39:32: [Minor] Port Scan is detected (124.124.118.179:45973->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:37:24: [Minor] Port Scan is detected (112.112.12.75:33174->95.95.223.205:23 TCP) from module Firewall
Mar  8 19:18:28: [Minor] Port Scan is detected (162.162.244.35:46220->95.95.223.205:21320 TCP) from module Firewall
Mar  8 19:15:47: [Minor] Port Scan is detected (42.42.159.237:50784->95.95.223.205:222 TCP) from module Firewall
Mar  8 19:12:24: [Minor] IP Flood is detected (17.17.143.164:5223->95.95.223.205:51956 TCP) from module Firewall


Wie ihr seht, ist die Ziel-IP immer die gleiche (95.95.223.205) und laut GeoIP-Abfrage gehört die zu einem Netzwerk irgendwo in Portugal...
Die Absender variieren, wobei manche sich ab und zu wiederholen; Das sieht mir irgendwie stark nach einem DDoS aus, aber warum taucht das in meinem Log auf? Ist die Horizon etwa angreifbar und wird meine als Teil eines Botnetzes verwendet?

Unitymedia kann mir natürlich nicht helfen, da sie (Zitat!) "leider keine Ahnung haben". Samsung fühlt sich natürlich auch nicht zuständig. :wand:
Auch wenn ich im Grunde relativ sicher bin, dass mein Netzwerk nicht gefährdet ist (da ja die IP-Adressen nicht dazu gehören), möchte ich doch sehr gerne verstehen, was da abgeht. Das fuchst mich!

Jetzt seid ihr dran... Hat jemand ne Idee, was der Hintergrund für die Meldungen sein kann? Hat jemand vielleicht ähnliches in seinem Horizon-Log?

Servus
uschgu
Benutzeravatar
uschgu
Kabelneuling
 
Beiträge: 3
Registriert: 08.03.2016, 20:57
Wohnort: Köln

Re: Horizon meldet Firewall Warnungen

Beitragvon tomkee1220 » 15.03.2016, 21:52

Hallo Uschgu, ich habe genau das gleiche Problem... Da du die gleiche Frage ja schon auf heise.de gestellt hast, habe ich dir ja da schon geantwortet...
hast du auch öfters Abstürze deines Internets ?? Selbst wenn meine IP sich ändert ändert sich die Ziel-IP der "Angriffe". sie sieht der eigenen IP ziemlich ähnlich.

viele Grüße

Tomkee
tomkee1220
Kabelneuling
 
Beiträge: 4
Registriert: 05.11.2014, 01:56

Re: Horizon meldet Firewall Warnungen

Beitragvon uschgu » 19.03.2016, 09:48

Richtige Internet-Störungen habe ich eigentlich nicht. Manchmal habe ich den Eindruck, dass etwas mit der Verbindung nicht stimmt, aber das ist eher sporadisch.
Die Ziel-IP 95.95.223.205 ist in der Tat sehr ähnlich zu meiner WAN-IP 95.223.205.xxx, wobei es keinen Unterschied macht, wenn ich meine WAN-IP ändere.
Benutzeravatar
uschgu
Kabelneuling
 
Beiträge: 3
Registriert: 08.03.2016, 20:57
Wohnort: Köln

Re: Horizon meldet Firewall Warnungen

Beitragvon Hoschy » 19.03.2016, 10:35

Hallo zusammen,
ich kann ein ähnliches Verhalten bei meiner Horizon feststellen. Allerdings habe ich auch noch keiner Erklärung dafür.
Sollte ich etwas herausfinden, werde ich es euch mitteilen. Ich wäre dankbar, wenn ihr Neuigkeiten auch hier veröffentlichen würdet.

Vielen Dank.
Hoschy
Kabelneuling
 
Beiträge: 1
Registriert: 19.03.2016, 10:29

Re: Horizon meldet Firewall Warnungen

Beitragvon Kirlean » 20.03.2016, 12:11

Wie man folgend sieht ich kenns auch!!,.. ach ja ich habe übrigens 2 tage extreme internetprobleme deswegen gehabt, sogar komplett ausfälle,.. habe dann über die FB seite UM benachrichtigt samt des logs welcher zu den portscns auch noch IP FLOOD endhielt ,.. best antwort ever nach 3 stunden mein rechner ist verseucht,.. dabei teilte ich mit das ich alle onlinfähigen geräte getrennt habe vom internet xD die box also auch diese sachen protokoliert wenn nur die online ist,... nächste antwort nach einer weiteren stunde ,. ich sei schuld !!!!,.. ich dann wieder aufgeklärt seht euch das an IHR TECHNIKER BEI UM man sieht das die erste IP nicht meine ist,.. und sie eindeutig die folgende IP angreift,. sowie FLUTET!!!!,.. aber solltet ihr weiter der meinung sein das ICH schuld bin obwohl ich nachweisen kann das außer der Box Nix onlien ist,. habe ich keine Probleme die gebühren der letzen drei monate wieder zurück zu holen,.. und von meinem sonderkündigungsrecht gebrauch zu machen ,.. xD keine 10 minuten später funktionierte mein internet wieder sowie das Telefon,.. einzige was blieb ist eben das irgendwer meine box "nur" als SCANBOT weiterhin benutzt ob meine web geräte online sind oder eben nicht ,... ach übrigens nen firmware update zu bekommen für die Horizon box ist unmachbar irgendwie,.. zudem scheinen laut internetrecherche nicht nur UM das problem zu haben!! ne menge internetanbieter scheinen davon betriffen zu sein,.. und das nicht erst seid gestern bzw nen paar wochen :)

"Mar 18 11:13:08: [Minor] IP Flood is detected (157.157.56.192:443->178.178.202.39:57164 TCP) from module Firewall
Mar 18 11:12:06: [Minor] IP Flood is detected (65.65.55.223:443->178.178.202.39:57090 TCP) from module Firewall"

Mar 20 10:59:22: [Minor] Port Scan is detected (76.76.102.118:33252->178.178.203.57:23 TCP) from module Firewall
Mar 20 10:57:48: [Minor] Port Scan is detected (79.79.107.27:50301->178.178.203.57:443 TCP) from module Firewall
Mar 20 10:57:48: [Minor] Port Scan is detected (86.86.151.84:58069->178.178.203.57:80 TCP) from module Firewall
Mar 20 10:57:48: [Minor] Port Scan is detected (71.71.89.33:49374->178.178.203.57:21182 TCP) from module Firewall
Mar 20 10:41:02: [Minor] Port Scan is detected (184.184.105.247:47491->178.178.203.57:11211 TCP) from module Firewall
Mar 20 10:33:00: [Minor] Port Scan is detected (119.119.198.165:35251->178.178.203.57:23 TCP) from module Firewall
Mar 20 10:30:36: [Minor] Port Scan is detected (52.52.33.130:50539->178.178.203.57:80 TCP) from module Firewall
Mar 20 10:30:07: [Minor] Port Scan is detected (82.82.221.105:17449->178.178.203.57:5900 TCP) from module Firewall
Mar 20 10:24:47: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 20 10:22:34: [Minor] Port Scan is detected (46.46.146.235:55297->178.178.203.57:3389 TCP) from module Firewall
Mar 20 10:07:22: [Minor] Port Scan is detected (110.110.92.184:4140->178.178.203.57:23 TCP) from module Firewall
Mar 20 10:05:07: [Minor] Port Scan is detected (218.218.246.0:43783->178.178.203.57:567 TCP) from module Firewall
Mar 20 09:59:17: [Minor] Port Scan is detected (2.2.182.151:48662->178.178.203.57:23 TCP) from module Firewall
Mar 20 09:57:26: [Minor] Port Scan is detected (90.90.161.236:60391->178.178.203.57:445 TCP) from module Firewall
Mar 20 09:56:21: [Minor] Port Scan is detected (187.187.143.98:46424->178.178.203.57:23 TCP) from module Firewall
Mar 20 09:54:58: [Minor] IP Flood is detected (145.145.253.207:443->178.178.203.57:50582 TCP) from module Firewall
Mar 20 09:52:26: [Minor] Port Scan is detected (74.74.82.47:39245->178.178.203.57:80 TCP) from module Firewall
Mar 20 09:40:56: [Minor] Port Scan is detected (64.64.125.239:60865->178.178.203.57:81 TCP) from module Firewall
Mar 20 09:39:45: [Minor] Port Scan is detected (221.221.179.89:63956->178.178.203.57:22 TCP) from module Firewall
Mar 20 09:37:59: [Minor] Port Scan is detected (118.118.69.35:52502->178.178.203.57:445 TCP) from module Firewall
Mar 20 09:31:55: [Minor] Port Scan is detected (71.71.6.167:34680->178.178.203.57:80 TCP) from module Firewall
Mar 20 09:30:30: [Minor] Port Scan is detected (177.177.133.50:57786->178.178.203.57:23 TCP) from module Firewall
Mar 20 08:37:02: [Minor] Port Scan is detected (220.220.133.252:60651->178.178.203.57:23 TCP) from module Firewall
Mar 20 08:33:58: [Minor] Port Scan is detected (46.46.148.21:47456->178.178.203.57:8080 TCP) from module Firewall
Mar 20 08:31:40: [Minor] Port Scan is detected (189.189.225.250:45925->178.178.203.57:23 TCP) from module Firewall
Mar 20 08:30:58: [Minor] Port Scan is detected (94.94.102.48:47564->178.178.203.57:6588 TCP) from module Firewall
Mar 20 08:21:59: [Minor] Port Scan is detected (158.158.109.69:46341->178.178.203.57:80 TCP) from module Firewall
Mar 20 08:15:18: [Minor] Port Scan is detected (58.58.140.210:65445->178.178.203.57:23 TCP) from module Firewall
Mar 20 08:14:38: [Minor] IP Flood is detected (157.157.56.17:443->178.178.203.57:57733 TCP) from module Firewall
Mar 20 08:14:34: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 20 08:12:45: [Minor] Port Scan is detected (201.201.139.144:56518->178.178.203.57:23 TCP) from module Firewall
Mar 20 08:03:32: [Minor] Port Scan is detected (181.181.194.144:58134->178.178.203.57:23 TCP) from module Firewall
Mar 20 07:59:53: [Minor] Port Scan is detected (64.64.62.219:59905->178.178.203.57:443 TCP) from module Firewall
Mar 20 07:59:13: [Minor] Port Scan is detected (41.41.223.52:34514->178.178.203.57:8080 TCP) from module Firewall
Mar 20 07:59:07: [Minor] Port Scan is detected (90.90.161.236:62446->178.178.203.57:445 TCP) from module Firewall
Mar 20 07:58:19: [Minor] Port Scan is detected (64.64.62.219:59905->178.178.203.57:443 TCP) from module Firewall
Mar 20 07:49:28: [Minor] Port Scan is detected (112.112.16.72:49513->178.178.203.57:23 TCP) from module Firewall
Mar 20 07:46:42: [Minor] Port Scan is detected (122.122.52.183:55433->178.178.203.57:23 TCP) from module Firewall
Mar 20 07:46:16: [Minor] Port Scan is detected (212.212.112.118:55874->178.178.203.57:3389 TCP) from module Firewall
Mar 20 07:44:17: [Minor] Port Scan is detected (183.183.60.48:12204->178.178.203.57:3389 TCP) from module Firewall
Mar 20 07:28:41: [Minor] Port Scan is detected (64.64.125.239:35616->178.178.203.57:91 TCP) from module Firewall
Mar 20 07:14:34: [Minor] Port Scan is detected (177.177.40.7:33734->178.178.203.57:23 TCP) from module Firewall
Mar 20 07:08:17: [Minor] Port Scan is detected (183.183.60.48:12201->178.178.203.57:22 TCP) from module Firewall
Mar 20 06:58:14: [Minor] Port Scan is detected (61.61.147.103:6000->178.178.203.57:1433 TCP) from module Firewall
Mar 20 06:53:56: [Minor] Port Scan is detected (94.94.102.48:47564->178.178.203.57:2269 TCP) from module Firewall
Mar 20 06:44:38: [Minor] Port Scan is detected (222.222.186.34:6000->178.178.203.57:1433 TCP) from module Firewall
Mar 20 06:39:09: [Minor] Port Scan is detected (200.200.8.111:56524->178.178.203.57:23 TCP) from module Firewall
Mar 20 06:34:17: [Minor] Port Scan is detected (36.36.225.54:53826->178.178.203.57:23 TCP) from module Firewall
Mar 20 06:29:45: [Minor] Port Scan is detected (183.183.60.48:12217->178.178.203.57:3306 TCP) from module Firewall
Mar 20 06:28:35: [Minor] Port Scan is detected (210.210.120.6:2448->178.178.203.57:3389 TCP) from module Firewall
Mar 20 06:26:06: [Minor] Port Scan is detected (71.71.6.158:31632->178.178.203.57:55553 TCP) from module Firewall
Mar 20 06:23:49: [Minor] Port Scan is detected (118.118.194.226:6000->178.178.203.57:2222 TCP) from module Firewall
Mar 20 06:22:41: [Minor] Port Scan is detected (159.159.90.128:37142->178.178.203.57:80 TCP) from module Firewall
Mar 20 06:14:21: [Minor] Port Scan is detected (112.112.54.97:53332->178.178.203.57:3389 TCP) from module Firewall
Mar 20 06:06:25: [Minor] Port Scan is detected (58.58.140.208:11130->178.178.203.57:23 TCP) from module Firewall
Mar 20 06:05:42: [Minor] Port Scan is detected (184.184.107.226:56085->178.178.203.57:10000 TCP) from module Firewall
Mar 20 06:05:34: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 20 05:58:26: [Minor] Port Scan is detected (183.183.3.202:9090->178.178.203.57:22 TCP) from module Firewall
Mar 20 05:52:35: [Minor] Port Scan is detected (13.13.81.11:49945->178.178.203.57:3389 TCP) from module Firewall
Mar 20 05:46:21: [Minor] Port Scan is detected (46.46.174.191:50000->178.178.203.57:8080 TCP) from module Firewall
Mar 20 05:45:36: [Minor] Port Scan is detected (141.141.212.122:40082->178.178.203.57:25 TCP) from module Firewall
Mar 20 05:38:48: [Minor] Port Scan is detected (117.117.194.240:3861->178.178.203.57:23 TCP) from module Firewall
Mar 20 05:36:44: [Minor] Port Scan is detected (66.66.240.236:31632->178.178.203.57:3780 TCP) from module Firewall
Mar 20 05:31:33: [Minor] Port Scan is detected (71.71.6.158:20012->178.178.203.57:311 TCP) from module Firewall
Mar 20 05:28:59: [Minor] Port Scan is detected (95.95.172.208:48678->178.178.203.57:23 TCP) from module Firewall
Mar 20 05:11:24: [Minor] Port Scan is detected (66.66.240.219:11748->178.178.203.57:111 TCP) from module Firewall
Mar 20 05:10:31: [Minor] Port Scan is detected (74.74.82.47:58970->178.178.203.57:443 TCP) from module Firewall
Mar 20 05:06:59: [Minor] Port Scan is detected (59.59.45.79:34289->178.178.203.57:22 TCP) from module Firewall
Mar 20 04:57:44: [Minor] Port Scan is detected (58.58.140.209:14962->178.178.203.57:23 TCP) from module Firewall
Mar 20 04:42:00: [Minor] Port Scan is detected (74.74.82.47:43178->178.178.203.57:6379 TCP) from module Firewall
Mar 20 04:40:14: [Minor] Port Scan is detected (175.175.6.228:40797->178.178.203.57:3389 TCP) from module Firewall
Mar 20 04:24:45: [Minor] Port Scan is detected (58.58.140.208:30673->178.178.203.57:23 TCP) from module Firewall
Mar 20 04:08:40: [Minor] Port Scan is detected (66.66.240.192:36877->178.178.203.57:7218 TCP) from module Firewall
Mar 20 04:06:02: [Minor] Port Scan is detected (117.117.200.74:40725->178.178.203.57:23 TCP) from module Firewall
Mar 20 03:58:37: [Minor] Port Scan is detected (71.71.6.167:34680->178.178.203.57:8069 TCP) from module Firewall
Mar 20 03:54:41: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 20 03:39:27: [Minor] Port Scan is detected (88.88.224.232:60047->178.178.203.57:23 TCP) from module Firewall
Mar 20 03:36:20: [Minor] Port Scan is detected (113.113.183.107:49398->178.178.203.57:23 TCP) from module Firewall
Mar 20 03:34:53: [Minor] Port Scan is detected (216.216.218.206:54796->178.178.203.57:27017 TCP) from module Firewall
Mar 20 03:31:26: [Minor] Port Scan is detected (90.90.161.236:65310->178.178.203.57:445 TCP) from module Firewall
Mar 20 03:30:49: [Minor] Port Scan is detected (117.117.248.187:48340->178.178.203.57:23 TCP) from module Firewall
Mar 20 03:24:31: [Minor] Port Scan is detected (71.71.6.135:62238->178.178.203.57:4444 TCP) from module Firewall
Mar 20 03:17:05: [Minor] Port Scan is detected (141.141.212.122:44363->178.178.203.57:502 TCP) from module Firewall
Mar 20 03:11:17: [Minor] Port Scan is detected (195.195.62.53:14800->178.178.203.57:8189 TCP) from module Firewall
Mar 20 02:56:22: [Minor] Port Scan is detected (218.218.246.0:43783->178.178.203.57:955 TCP) from module Firewall
Mar 20 02:54:33: [Minor] Port Scan is detected (222.222.186.56:6000->178.178.203.57:22 TCP) from module Firewall
Mar 20 02:47:53: [Minor] Port Scan is detected (64.64.125.239:44384->178.178.203.57:2222 TCP) from module Firewall
Mar 20 02:38:32: [Minor] Port Scan is detected (190.190.213.192:54860->178.178.203.57:23 TCP) from module Firewall
Mar 20 02:28:31: [Minor] Port Scan is detected (222.222.186.34:6000->178.178.203.57:3306 TCP) from module Firewall
Mar 20 02:25:24: [Minor] Port Scan is detected (159.159.8.41:35664->178.178.203.57:22 TCP) from module Firewall
Mar 20 02:19:31: [Minor] Port Scan is detected (1.1.32.49:47336->178.178.203.57:23 TCP) from module Firewall
Mar 20 02:18:16: [Minor] Port Scan is detected (185.185.130.5:53217->178.178.203.57:9527 TCP) from module Firewall
Mar 20 02:14:00: [Minor] Port Scan is detected (188.188.138.17:34680->178.178.203.57:82 TCP) from module Firewall
Mar 20 02:07:08: [Minor] Port Scan is detected (71.71.6.135:49717->178.178.203.57:902 TCP) from module Firewall
Mar 20 02:00:58: [Minor] Port Scan is detected (89.89.248.160:42696->178.178.203.57:1080 TCP) from module Firewall
Mar 20 01:59:03: [Minor] Port Scan is detected (183.183.60.48:12203->178.178.203.57:5901 TCP) from module Firewall
Mar 20 01:52:34: [Minor] Port Scan is detected (218.218.246.0:43783->178.178.203.57:960 TCP) from module Firewall
Mar 20 01:44:47: [Minor] Port Scan is detected (117.117.27.251:17285->178.178.203.57:3306 TCP) from module Firewall
Mar 20 01:44:32: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 20 01:43:46: [Minor] Port Scan is detected (91.91.108.176:53500->178.178.203.57:8080 TCP) from module Firewall
Mar 20 01:39:47: [Minor] Port Scan is detected (195.195.113.113:1753->178.178.203.57:3389 TCP) from module Firewall
Mar 20 01:30:59: [Minor] Port Scan is detected (106.106.243.151:38086->178.178.203.57:23 TCP) from module Firewall
Mar 20 01:24:28: [Minor] Port Scan is detected (78.78.188.139:35824->178.178.203.57:23 TCP) from module Firewall
Mar 20 01:19:53: [Minor] Port Scan is detected (201.201.194.90:39968->178.178.203.57:23 TCP) from module Firewall
Mar 20 01:12:07: [Minor] Port Scan is detected (186.186.128.183:56792->178.178.203.57:23 TCP) from module Firewall
Mar 20 00:57:04: [Minor] Port Scan is detected (90.90.161.236:54602->178.178.203.57:445 TCP) from module Firewall
Mar 20 00:50:01: [Minor] Port Scan is detected (198.198.20.70:62238->178.178.203.57:4444 TCP) from module Firewall
Mar 20 00:47:44: [Minor] Port Scan is detected (182.182.64.46:37107->178.178.203.57:23 TCP) from module Firewall
Mar 20 00:46:38: [Minor] Port Scan is detected (123.123.59.59:44401->178.178.203.57:3128 TCP) from module Firewall
Mar 20 00:40:59: [Minor] Port Scan is detected (60.60.191.74:10289->178.178.203.57:1433 TCP) from module Firewall
Mar 20 00:35:09: [Minor] Port Scan is detected (178.178.239.165:50366->178.178.203.57:25 TCP) from module Firewall
Mar 20 00:33:04: [Minor] Port Scan is detected (64.64.125.239:43205->178.178.203.57:8000 TCP) from module Firewall
Mar 20 00:27:42: [Minor] Port Scan is detected (61.61.216.84:1611->178.178.203.57:22 TCP) from module Firewall
Mar 20 00:19:51: [Minor] Port Scan is detected (120.120.132.67:35678->178.178.203.57:8123 TCP) from module Firewall
Mar 20 00:18:43: [Minor] Port Scan is detected (212.212.143.137:39505->178.178.203.57:23 TCP) from module Firewall
Mar 20 00:09:30: [Minor] Port Scan is detected (77.77.245.77:9298->178.178.203.57:22 TCP) from module Firewall
Mar 20 00:07:26: [Minor] Port Scan is detected (5.5.15.107:52889->178.178.203.57:23 TCP) from module Firewall
Mar 20 00:07:25: [Minor] Port Scan is detected (129.129.194.184:49232->178.178.203.57:3389 TCP) from module Firewall
Mar 20 00:05:40: [Minor] Port Scan is detected (58.58.140.208:34532->178.178.203.57:23 TCP) from module Firewall
Mar 20 00:03:34: [Minor] Port Scan is detected (85.85.25.43:34680->178.178.203.57:5357 TCP) from module Firewall
Mar 19 23:52:12: [Minor] Port Scan is detected (1.1.34.168:51730->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:49:48: [Minor] Port Scan is detected (14.14.169.155:60452->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:45:52: [Minor] Port Scan is detected (120.120.132.95:60644->178.178.203.57:8123 TCP) from module Firewall
Mar 19 23:44:33: [Minor] Port Scan is detected (88.88.204.187:46809->178.178.203.57:3389 TCP) from module Firewall
Mar 19 23:35:25: [Minor] Port Scan is detected (104.104.40.14:47502->178.178.203.57:22 TCP) from module Firewall
Mar 19 23:35:14: [Minor] Port Scan is detected (185.185.62.84:57325->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:34:36: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 19 23:29:48: [Minor] Port Scan is detected (118.118.125.170:40453->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:29:03: [Minor] Port Scan is detected (108.108.46.115:52569->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:28:56: [Minor] Port Scan is detected (95.95.173.184:38746->178.178.203.57:22 TCP) from module Firewall
Mar 19 23:27:08: [Minor] Port Scan is detected (118.118.42.151:53894->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:26:57: [Minor] Port Scan is detected (123.123.151.149:22218->178.178.203.57:1723 TCP) from module Firewall
Mar 19 23:21:17: [Minor] Port Scan is detected (208.208.95.115:48716->178.178.203.57:5900 TCP) from module Firewall
Mar 19 23:19:41: [Minor] Port Scan is detected (220.220.133.174:37637->178.178.203.57:23 TCP) from module Firewall
Mar 19 23:12:26: [Minor] Port Scan is detected (212.212.48.93:40810->178.178.203.57:3389 TCP) from module Firewall
Mar 19 23:00:09: [Minor] Port Scan is detected (69.69.22.151:43786->178.178.203.57:52409 TCP) from module Firewall
Mar 19 22:46:52: [Minor] Port Scan is detected (65.65.182.88:3750->178.178.203.57:23 TCP) from module Firewall
Mar 19 22:39:53: [Minor] Port Scan is detected (179.179.182.15:57010->178.178.203.57:23 TCP) from module Firewall
Mar 19 22:39:21: [Minor] Port Scan is detected (1.1.55.111:54087->178.178.203.57:23 TCP) from module Firewall
Mar 19 22:38:57: [Minor] Port Scan is detected (141.141.255.155:28367->178.178.203.57:180 TCP) from module Firewall
Mar 19 22:38:17: [Minor] Port Scan is detected (106.106.75.192:55330->178.178.203.57:27017 TCP) from module Firewall
Mar 19 22:34:48: [Minor] Port Scan is detected (59.59.45.79:59412->178.178.203.57:22 TCP) from module Firewall
Mar 19 22:33:05: [Minor] Port Scan is detected (71.71.6.165:6440->178.178.203.57:5672 TCP) from module Firewall
Mar 19 22:22:18: [Minor] Port Scan is detected (43.43.242.117:63455->178.178.203.57:23 TCP) from module Firewall
Mar 19 22:22:07: [Minor] Port Scan is detected (198.198.20.70:20012->178.178.203.57:443 TCP) from module Firewall
Mar 19 22:19:59: [Minor] Port Scan is detected (222.222.186.56:6000->178.178.203.57:3306 TCP) from module Firewall
Mar 19 22:19:40: [Minor] Port Scan is detected (183.183.60.48:12210->178.178.203.57:1433 TCP) from module Firewall
Mar 19 22:15:12: [Minor] Port Scan is detected (58.58.11.22:47511->178.178.203.57:23 TCP) from module Firewall
Mar 19 22:07:35: [Minor] Port Scan is detected (27.27.220.51:3915->178.178.203.57:23 TCP) from module Firewall
Mar 19 21:51:10: [Minor] Port Scan is detected (190.190.226.88:33024->178.178.203.57:23 TCP) from module Firewall
Mar 19 21:45:17: [Minor] Port Scan is detected (173.173.198.177:3695->178.178.203.57:23 TCP) from module Firewall
Mar 19 21:41:41: [Minor] Port Scan is detected (88.88.204.187:55391->178.178.203.57:3389 TCP) from module Firewall
Mar 19 21:32:34: [Minor] Port Scan is detected (13.13.81.11:49945->178.178.203.57:3390 TCP) from module Firewall
Mar 19 21:30:54: [Minor] Port Scan is detected (183.183.60.48:12202->178.178.203.57:23 TCP) from module Firewall
Mar 19 21:24:34: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 19 21:10:15: [Minor] Port Scan is detected (95.95.208.208:55653->178.178.203.57:80 TCP) from module Firewall
Mar 19 21:08:08: [Minor] Port Scan is detected (66.66.240.192:37079->178.178.203.57:102 TCP) from module Firewall
Mar 19 21:06:40: [Minor] Port Scan is detected (115.115.87.166:46153->178.178.203.57:23 TCP) from module Firewall
Mar 19 21:02:26: [Minor] Port Scan is detected (66.66.240.192:41665->178.178.203.57:995 TCP) from module Firewall
Mar 19 21:01:57: [Minor] Port Scan is detected (91.91.108.176:57646->178.178.203.57:80 TCP) from module Firewall
Mar 19 20:52:04: [Minor] Port Scan is detected (191.191.54.127:38505->178.178.203.57:23 TCP) from module Firewall
Mar 19 20:51:16: [Minor] Port Scan is detected (52.52.77.54:56459->178.178.203.57:3389 TCP) from module Firewall
Mar 19 20:33:30: [Minor] Port Scan is detected (198.198.20.70:1572->178.178.203.57:2628 TCP) from module Firewall
Mar 19 20:26:04: [Minor] Port Scan is detected (159.159.146.110:41304->178.178.203.57:23 TCP) from module Firewall
Mar 19 20:13:31: [Minor] Port Scan is detected (5.5.249.128:56268->178.178.203.57:3306 TCP) from module Firewall
Mar 19 20:03:05: [Minor] Port Scan is detected (111.111.91.183:3669->178.178.203.57:23 TCP) from module Firewall
Mar 19 20:01:58: [Minor] Port Scan is detected (109.109.104.86:27469->178.178.203.57:3389 TCP) from module Firewall
Mar 19 20:00:10: [Minor] Port Scan is detected (209.209.107.220:43254->178.178.203.57:52409 TCP) from module Firewall
Mar 19 19:55:34: [Minor] Port Scan is detected (178.178.239.165:53402->178.178.203.57:443 TCP) from module Firewall
Mar 19 19:54:11: [Minor] Port Scan is detected (222.222.208.183:60541->178.178.203.57:22 TCP) from module Firewall
Mar 19 19:45:28: [Minor] Port Scan is detected (115.115.218.142:3141->178.178.203.57:23 TCP) from module Firewall
Mar 19 19:42:37: [Minor] Port Scan is detected (91.91.236.75:56074->178.178.203.57:3128 TCP) from module Firewall
Mar 19 19:26:16: [Minor] Port Scan is detected (118.118.193.155:4935->178.178.203.57:3389 TCP) from module Firewall
Mar 19 19:14:18: [Minor] Port Scan is detected (115.115.231.222:64316->178.178.203.57:3128 TCP) from module Firewall
Mar 19 19:12:41: [Minor] Port Scan is detected (181.181.214.92:56429->178.178.203.57:80 TCP) from module Firewall
Mar 19 19:10:17: [Minor] Port Scan is detected (37.37.203.214:48073->178.178.203.57:8080 TCP) from module Firewall
Mar 19 19:06:58: [Minor] Port Scan is detected (78.78.21.17:40064->178.178.203.57:23 TCP) from module Firewall
Mar 19 18:56:50: [Minor] Port Scan is detected (199.199.115.117:1792->178.178.203.57:5038 TCP) from module Firewall
Mar 19 18:56:13: [Minor] Port Scan is detected (159.159.8.41:48430->178.178.203.57:22 TCP) from module Firewall
Mar 19 18:35:54: [Minor] Port Scan is detected (194.194.29.62:
[log truncated]
Kirlean
Kabelneuling
 
Beiträge: 8
Registriert: 20.03.2016, 12:02

Re: Horizon meldet Firewall Warnungen

Beitragvon no_brain » 20.03.2016, 22:49

Hallo zusammen,

mich hat es wohl auch "erwischt":
Mar 20 21:00:41: [Minor] Port Scan is detected (71.71.6.135:14898->176.176.198.196:5222 TCP) from module Firewall
Mar 20 20:54:33: [Minor] Port Scan is detected (222.222.186.34:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 20:54:28: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 20:54:08: [Minor] Port Scan is detected (114.114.119.5:47495->176.176.198.196:22 TCP) from module Firewall
Mar 20 20:53:53: [Minor] Port Scan is detected (190.190.91.59:4668->176.176.198.196:23 TCP) from module Firewall
Mar 20 20:53:11: [Minor] Port Scan is detected (71.71.6.167:13944->176.176.198.196:1177 TCP) from module Firewall
Mar 20 20:46:50: [Minor] Port Scan is detected (61.61.155.203:38794->176.176.198.196:22 TCP) from module Firewall
Mar 20 20:36:36: [Minor] Port Scan is detected (159.159.146.50:36368->176.176.198.196:23 TCP) from module Firewall
Mar 20 20:31:22: [Minor] Port Scan is detected (70.70.90.237:36183->176.176.198.196:10000 TCP) from module Firewall
Mar 20 20:20:41: [Minor] Port Scan is detected (118.118.193.133:4935->176.176.198.196:3389 TCP) from module Firewall
Mar 20 20:18:07: [Minor] Port Scan is detected (119.119.29.9:12200->176.176.198.196:3389 TCP) from module Firewall
Mar 20 20:14:15: [Minor] Port Scan is detected (173.173.233.68:55998->176.176.198.196:23 TCP) from module Firewall
Mar 20 20:10:21: [Minor] Port Scan is detected (141.141.255.148:27641->176.176.198.196:800 TCP) from module Firewall
Mar 20 20:02:23: [Minor] Port Scan is detected (59.59.45.79:57882->176.176.198.196:22 TCP) from module Firewall
Mar 20 19:59:25: [Minor] Port Scan is detected (216.216.243.31:42479->176.176.198.196:443 TCP) from module Firewall
Mar 20 19:48:06: [Minor] Port Scan is detected (36.36.229.233:12200->176.176.198.196:55002 TCP) from module Firewall
Mar 20 19:42:38: [Minor] Port Scan is detected (89.89.248.162:59745->176.176.198.196:25 TCP) from module Firewall
Mar 20 19:34:38: [Minor] Port Scan is detected (175.175.170.251:54190->176.176.198.196:23 TCP) from module Firewall
Mar 20 19:32:40: [Minor] Port Scan is detected (218.218.246.0:43783->176.176.198.196:359 TCP) from module Firewall
Mar 20 19:31:38: [Minor] Port Scan is detected (183.183.60.48:12204->176.176.198.196:4899 TCP) from module Firewall
Mar 20 19:25:27: [Minor] Port Scan is detected (116.116.252.178:6000->176.176.198.196:1433 TCP) from module Firewall
Mar 20 19:20:56: [Minor] Port Scan is detected (222.222.186.58:6000->176.176.198.196:9200 TCP) from module Firewall
Mar 20 19:17:23: [Minor] Port Scan is detected (222.222.186.31:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 19:04:43: [Minor] Port Scan is detected (71.71.6.167:34680->176.176.198.196:8112 TCP) from module Firewall
Mar 20 19:04:02: [Minor] Port Scan is detected (201.201.151.165:51622->176.176.198.196:3389 TCP) from module Firewall
Mar 20 19:03:25: [Minor] IP Flood is detected (135.135.245.210:443->176.176.198.196:59946 TCP) from module Firewall
Mar 20 19:00:31: [Minor] Port Scan is detected (188.188.68.224:56288->176.176.198.196:21320 TCP) from module Firewall
Mar 20 18:54:48: [Minor] Port Scan is detected (181.181.211.39:33913->176.176.198.196:10000 TCP) from module Firewall
Mar 20 18:46:43: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 18:45:40: [Minor] Port Scan is detected (198.198.20.87:14898->176.176.198.196:5222 TCP) from module Firewall
Mar 20 18:44:44: [Minor] Port Scan is detected (36.36.229.246:12200->176.176.198.196:8080 TCP) from module Firewall
Mar 20 18:43:51: [Minor] Port Scan is detected (190.190.158.54:33444->176.176.198.196:23 TCP) from module Firewall
Mar 20 18:41:28: [Minor] Port Scan is detected (203.203.143.254:39832->176.176.198.196:23 TCP) from module Firewall
Mar 20 18:38:12: [Minor] Port Scan is detected (37.37.78.159:39565->176.176.198.196:22 TCP) from module Firewall
Mar 20 18:37:32: [Minor] Port Scan is detected (188.188.68.224:55244->176.176.198.196:21320 TCP) from module Firewall
Mar 20 18:36:48: [Minor] Port Scan is detected (61.61.228.89:12200->176.176.198.196:55002 TCP) from module Firewall
Mar 20 18:34:15: [Minor] Port Scan is detected (82.82.221.105:31632->176.176.198.196:2087 TCP) from module Firewall
Mar 20 18:33:48: [Minor] Port Scan is detected (81.81.88.224:41301->176.176.198.196:10000 TCP) from module Firewall
Mar 20 18:15:56: [Minor] Port Scan is detected (198.198.20.70:23668->176.176.198.196:5577 TCP) from module Firewall
Mar 20 18:12:42: [Minor] Port Scan is detected (186.186.232.120:33200->176.176.198.196:23 TCP) from module Firewall
Mar 20 18:07:51: [Minor] Port Scan is detected (182.182.69.170:3027->176.176.198.196:23 TCP) from module Firewall
Mar 20 17:44:14: [Minor] Port Scan is detected (180.180.97.106:48363->176.176.198.196:21 TCP) from module Firewall
Mar 20 17:42:21: [Minor] Port Scan is detected (40.40.68.28:1048->176.176.198.196:22 TCP) from module Firewall
Mar 20 17:39:07: [Minor] Port Scan is detected (80.80.82.64:62202->176.176.198.196:5900 TCP) from module Firewall
Mar 20 17:35:52: [Minor] Port Scan is detected (183.183.60.48:12207->176.176.198.196:5902 TCP) from module Firewall
Mar 20 17:34:33: [Minor] IP Flood is detected (217.217.72.201:443->176.176.198.196:49647 TCP) from module Firewall
Mar 20 17:08:57: [Minor] Port Scan is detected (218.218.246.0:43783->176.176.198.196:191 TCP) from module Firewall
Mar 20 16:38:21: [Minor] Port Scan is detected (111.111.13.26:4918->176.176.198.196:22 TCP) from module Firewall
Mar 20 16:36:42: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 16:31:04: [Minor] Port Scan is detected (111.111.248.101:12200->176.176.198.196:8118 TCP) from module Firewall
Mar 20 16:24:20: [Minor] IP Flood is detected (173.173.241.240:443->176.176.198.196:56703 TCP) from module Firewall
Mar 20 16:15:39: [Minor] Port Scan is detected (47.47.67.112:33235->176.176.198.196:22 TCP) from module Firewall
Mar 20 16:02:47: [Minor] Port Scan is detected (66.66.240.192:56218->176.176.198.196:37 TCP) from module Firewall
Mar 20 16:02:25: [Minor] Port Scan is detected (218.218.246.0:43783->176.176.198.196:516 TCP) from module Firewall
Mar 20 15:51:26: [Minor] Port Scan is detected (123.123.151.149:22203->176.176.198.196:1723 TCP) from module Firewall
Mar 20 15:42:12: [Minor] Port Scan is detected (185.185.81.111:43497->176.176.198.196:23 TCP) from module Firewall
Mar 20 15:37:14: [Minor] Port Scan is detected (184.184.105.139:43151->176.176.198.196:80 TCP) from module Firewall
Mar 20 15:10:15: [Minor] Port Scan is detected (61.61.174.63:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 15:05:35: [Minor] Port Scan is detected (202.202.206.249:34556->176.176.198.196:3389 TCP) from module Firewall
Mar 20 15:01:38: [Minor] Port Scan is detected (121.121.53.103:48173->176.176.198.196:22 TCP) from module Firewall
Mar 20 15:00:08: [Minor] Port Scan is detected (66.66.240.192:31632->176.176.198.196:3790 TCP) from module Firewall
Mar 20 14:56:49: [Minor] Port Scan is detected (58.58.140.211:47837->176.176.198.196:23 TCP) from module Firewall
Mar 20 14:54:05: [Minor] Port Scan is detected (85.85.25.43:24366->176.176.198.196:2404 TCP) from module Firewall
Mar 20 14:53:47: [Minor] Port Scan is detected (64.64.125.239:57772->176.176.198.196:80 TCP) from module Firewall
Mar 20 14:50:01: [Minor] Port Scan is detected (183.183.60.48:12215->176.176.198.196:1433 TCP) from module Firewall
Mar 20 14:47:00: [Minor] Port Scan is detected (218.218.246.0:55844->176.176.198.196:1057 TCP) from module Firewall
Mar 20 14:43:26: [Minor] Port Scan is detected (64.64.125.239:40438->176.176.198.196:22 TCP) from module Firewall
Mar 20 14:28:01: [Minor] IP Flood is detected (135.135.245.210:443->176.176.198.196:59718 TCP) from module Firewall
Mar 20 14:26:18: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 14:23:41: [Minor] Port Scan is detected (189.189.197.241:42661->176.176.198.196:23 TCP) from module Firewall
Mar 20 14:22:41: [Minor] Port Scan is detected (50.50.194.127:55617->176.176.198.196:5900 TCP) from module Firewall
Mar 20 14:20:50: [Minor] Port Scan is detected (159.159.8.41:43763->176.176.198.196:22 TCP) from module Firewall
Mar 20 14:20:25: [Minor] Port Scan is detected (184.184.105.139:54226->176.176.198.196:11211 TC) from module Firewall
Mar 20 14:18:30: [Minor] Port Scan is detected (195.195.154.251:41117->176.176.198.196:5060 TCP) from module Firewall
Mar 20 14:16:29: [Minor] Port Scan is detected (216.216.218.206:33499->176.176.198.196:9200 TCP) from module Firewall
Mar 20 14:14:26: [Minor] Port Scan is detected (41.41.253.163:40388->176.176.198.196:23 TCP) from module Firewall
Mar 20 14:12:03: [Minor] Port Scan is detected (216.216.243.31:40761->176.176.198.196:80 TCP) from module Firewall
Mar 20 14:06:08: [Minor] Port Scan is detected (141.141.255.148:6962->176.176.198.196:1081 TCP) from module Firewall
Mar 20 13:34:27: [Minor] Port Scan is detected (222.222.214.218:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 13:30:14: [Minor] Port Scan is detected (115.115.47.39:6000->176.176.198.196:1433 TCP) from module Firewall
Mar 20 13:25:31: [Minor] Port Scan is detected (193.193.201.225:56054->176.176.198.196:22 TCP) from module Firewall
Mar 20 13:20:37: [Minor] Port Scan is detected (111.111.93.9:48811->176.176.198.196:5631 TCP) from module Firewall
Mar 20 13:17:32: [Minor] Port Scan is detected (104.104.130.2:46520->176.176.198.196:10000 TCP) from module Firewall
Mar 20 13:13:10: [Minor] Port Scan is detected (49.49.117.147:45767->176.176.198.196:22 TCP) from module Firewall
Mar 20 13:10:37: [Minor] Port Scan is detected (61.61.231.6:12200->176.176.198.196:8118 TCP) from module Firewall
Mar 20 13:10:19: [Minor] Port Scan is detected (186.186.69.26:58249->176.176.198.196:10000 TCP) from module Firewall
Mar 20 13:09:34: [Minor] Port Scan is detected (37.37.229.109:2563->176.176.198.196:4899 TCP) from module Firewall
Mar 20 13:06:05: [Minor] Port Scan is detected (223.223.4.174:13462->176.176.198.196:5900 TCP) from module Firewall
Mar 20 12:57:03: [Minor] Port Scan is detected (89.89.248.160:59883->176.176.198.196:8080 TCP) from module Firewall
Mar 20 12:55:57: [Minor] Port Scan is detected (220.220.162.161:3026->176.176.198.196:23 TCP) from module Firewall
Mar 20 12:55:17: [Minor] Port Scan is detected (180.180.97.215:6000->176.176.198.196:1433 TCP) from module Firewall
Mar 20 12:49:52: [Minor] Port Scan is detected (138.138.255.51:49754->176.176.198.196:23 TCP) from module Firewall
Mar 20 12:43:16: [Minor] Port Scan is detected (171.171.221.245:45405->176.176.198.196:23 TCP) from module Firewall
Mar 20 12:41:29: [Minor] Port Scan is detected (222.222.186.56:6000->176.176.198.196:1433 TCP) from module Firewall
Mar 20 12:20:49: [Minor] Port Scan is detected (115.115.239.248:6000->176.176.198.196:8080 TCP) from module Firewall
Mar 20 12:20:02: [Minor] Port Scan is detected (120.120.62.193:50038->176.176.198.196:23 TCP) from module Firewall
Mar 20 12:19:47: [Minor] Port Scan is detected (46.46.161.40:52177->176.176.198.196:3389 TCP) from module Firewall
Mar 20 12:17:52: [Minor] Port Scan is detected (119.119.95.179:57617->176.176.198.196:23 TCP) from module Firewall
Mar 20 12:15:25: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 12:07:41: [Minor] Port Scan is detected (111.111.248.117:12200->176.176.198.196:21320 TC) from module Firewall
Mar 20 12:07:28: [Minor] Port Scan is detected (199.199.231.94:47558->176.176.198.196:10000 TCP) from module Firewall
Mar 20 11:59:33: [Minor] Port Scan is detected (111.111.11.27:40273->176.176.198.196:10000 TCP) from module Firewall
Mar 20 11:58:14: [Minor] Port Scan is detected (95.95.110.159:51480->176.176.198.196:10000 TCP) from module Firewall
Mar 20 11:57:14: [Minor] Port Scan is detected (111.111.248.101:12200->176.176.198.196:8118 TCP) from module Firewall
Mar 20 11:56:02: [Minor] Port Scan is detected (169.169.229.3:36524->176.176.198.196:80 TCP) from module Firewall
Mar 20 11:50:21: [Minor] IP Flood is detected (135.135.245.210:443->176.176.198.196:59700 TCP) from module Firewall
Mar 20 11:43:58: [Minor] Port Scan is detected (61.61.143.6:21258->176.176.198.196:23 TCP) from module Firewall
Mar 20 11:37:39: [Minor] Port Scan is detected (94.94.245.138:62307->176.176.198.196:21 TCP) from module Firewall
Mar 20 11:31:54: [Minor] Port Scan is detected (188.188.68.224:49364->176.176.198.196:21320 TCP) from module Firewall
Mar 20 11:17:12: [Minor] Port Scan is detected (119.119.29.9:12200->176.176.198.196:3389 TCP) from module Firewall
Mar 20 11:12:43: [Minor] Port Scan is detected (184.184.105.139:40634->176.176.198.196:80 TCP) from module Firewall
Mar 20 11:04:06: [Minor] Port Scan is detected (82.82.221.105:34680->176.176.198.196:8069 TCP) from module Firewall
Mar 20 10:58:36: [Minor] Port Scan is detected (54.54.206.46:40139->176.176.198.196:80 TCP) from module Firewall
Mar 20 10:51:12: [Minor] Port Scan is detected (37.37.229.109:4545->176.176.198.196:4899 TCP) from module Firewall
Mar 20 10:49:10: [Minor] Port Scan is detected (61.61.230.231:60718->176.176.198.196:445 TCP) from module Firewall
Mar 20 10:45:04: [Minor] Port Scan is detected (184.184.105.139:43520->176.176.198.196:27017 TC) from module Firewall
Mar 20 10:44:11: [Minor] Port Scan is detected (198.198.20.69:34680->176.176.198.196:5560 TCP) from module Firewall
Mar 20 10:43:07: [Minor] IP Flood is detected (173.173.241.240:443->176.176.198.196:60973 TCP) from module Firewall
Mar 20 10:36:11: [Minor] Port Scan is detected (42.42.117.2:54262->176.176.198.196:3306 TCP) from module Firewall
Mar 20 10:34:37: [Minor] Port Scan is detected (198.198.20.70:34680->176.176.198.196:84 TCP) from module Firewall
Mar 20 10:14:43: [Minor] Port Scan is detected (115.115.76.246:47556->176.176.198.196:23 TCP) from module Firewall
Mar 20 10:14:15: [Minor] IP Flood is detected (91.91.215.100:80->176.176.198.196:49884 TCP) from module Firewall
Mar 20 10:08:26: [Minor] Port Scan is detected (216.216.218.206:34171->176.176.198.196:6379 TCP) from module Firewall
Mar 20 10:06:00: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 09:56:31: [Minor] Port Scan is detected (62.62.219.111:45763->176.176.198.196:23 TCP) from module Firewall
Mar 20 09:37:45: [Minor] IP Flood is detected (195.195.20.250:443->176.176.198.196:60335 TCP) from module Firewall
Mar 20 09:36:18: [Minor] Port Scan is detected (141.141.212.122:54025->176.176.198.196:502 TCP) from module Firewall
Mar 20 09:32:26: [Minor] Port Scan is detected (111.111.248.96:12200->176.176.198.196:55002 TCP) from module Firewall
Mar 20 09:30:04: [Minor] IP Flood is detected (74.74.6.34:443->176.176.198.196:56715 TCP) from module Firewall
Mar 20 09:16:39: [Minor] Port Scan is detected (198.198.20.70:31430->176.176.198.196:8099 TCP) from module Firewall
Mar 20 08:58:05: [Minor] Port Scan is detected (189.189.193.24:34983->176.176.198.196:23 TCP) from module Firewall
Mar 20 08:52:04: [Minor] Port Scan is detected (141.141.212.122:47975->176.176.198.196:80 TCP) from module Firewall
Mar 20 08:48:10: [Minor] Port Scan is detected (117.117.34.70:35350->176.176.198.196:22 TCP) from module Firewall
Mar 20 08:47:30: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:4894 TCP) from module Firewall
Mar 20 08:46:23: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:1023 TCP) from module Firewall
Mar 20 08:45:19: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5068 TCP) from module Firewall
Mar 20 08:44:11: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5044 TCP) from module Firewall
Mar 20 08:43:01: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:30 TCP) from module Firewall
Mar 20 08:41:26: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:8810 TCP) from module Firewall
Mar 20 08:40:19: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:8084 TCP) from module Firewall
Mar 20 08:39:02: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5065 TCP) from module Firewall
Mar 20 08:37:02: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:102 TCP) from module Firewall
Mar 20 08:35:33: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:40008 TCP) from module Firewall
Mar 20 08:34:28: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5040 TCP) from module Firewall
Mar 20 08:33:19: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:24 TCP) from module Firewall
Mar 20 08:32:02: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:1026 TCP) from module Firewall
Mar 20 08:31:27: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:10655 TCP) from module Firewall
Mar 20 08:31:00: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:40003 TCP) from module Firewall
Mar 20 08:30:08: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:1858 TCP) from module Firewall
Mar 20 08:29:26: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5058 TCP) from module Firewall
Mar 20 08:28:19: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:8090 TCP) from module Firewall
Mar 20 08:27:34: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:9090 TCP) from module Firewall
Mar 20 08:26:26: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5041 TCP) from module Firewall
Mar 20 08:25:14: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:43 TCP) from module Firewall
Mar 20 08:24:16: [Minor] Port Scan is detected (141.141.212.122:50657->176.176.198.196:143 TCP) from module Firewall
Mar 20 08:24:02: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:40002 TCP) from module Firewall
Mar 20 08:23:45: [Minor] Port Scan is detected (188.188.138.17:39720->176.176.198.196:389 TCP) from module Firewall
Mar 20 08:22:44: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:6900 TCP) from module Firewall
Mar 20 08:22:25: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:1025 TCP) from module Firewall
Mar 20 08:21:24: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5559 TCP) from module Firewall
Mar 20 08:20:19: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:1027 TCP) from module Firewall
Mar 20 08:19:06: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5510 TCP) from module Firewall
Mar 20 08:18:07: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:9900 TCP) from module Firewall
Mar 20 08:18:02: [Minor] Port Scan is detected (80.80.82.65:54652->176.176.198.196:5050 TCP) from module Firewall
Mar 20 08:15:34: [Minor] Port Scan is detected (61.61.216.2:52049->176.176.198.196:1900 TCP) from module Firewall
Mar 20 08:07:47: [Minor] Port Scan is detected (64.64.125.239:45565->176.176.198.196:81 TCP) from module Firewall
Mar 20 07:55:44: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 07:53:41: [Minor] Port Scan is detected (111.111.248.61:12200->176.176.198.196:443 TCP) from module Firewall
Mar 20 07:40:55: [Minor] Port Scan is detected (177.177.228.158:11026->176.176.198.196:23 TCP) from module Firewall
Mar 20 07:37:55: [Minor] Port Scan is detected (222.222.187.224:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 07:36:29: [Minor] Port Scan is detected (122.122.3.161:45003->176.176.198.196:23 TCP) from module Firewall
Mar 20 07:35:17: [Minor] Port Scan is detected (183.183.60.48:12206->176.176.198.196:3389 TCP) from module Firewall
Mar 20 07:10:01: [Minor] Port Scan is detected (208.208.67.1:51763->176.176.198.196:22 TCP) from module Firewall
Mar 20 06:59:18: [Minor] Port Scan is detected (183.183.60.48:12210->176.176.198.196:22 TCP) from module Firewall
Mar 20 06:58:42: [Minor] Port Scan is detected (212.212.227.141:53512->176.176.198.196:3390 TCP) from module Firewall
Mar 20 06:47:14: [Minor] Port Scan is detected (66.66.240.236:17449->176.176.198.196:8086 TCP) from module Firewall
Mar 20 06:32:49: [Minor] Port Scan is detected (23.23.102.43:14719->176.176.198.196:22 TCP) from module Firewall

Bislang keine Reaktion von UM!!!

Schade, eigentlich war ich bislang zufrieden mit UM...
no_brain
Kabelneuling
 
Beiträge: 2
Registriert: 18.10.2013, 21:40

Re: Horizon meldet Firewall Warnungen

Beitragvon NoGi » 21.03.2016, 10:07

no_brain hat geschrieben:Hallo zusammen,

mich hat es wohl auch "erwischt":
[size=85]Mar 20 21:00:41: [Minor] Port Scan is detected (71.71.6.135:14898->176.176.198.196:5222 TCP) from module Firewall
Mar 20 20:54:33: [Minor] Port Scan is detected (222.222.186.34:6000->176.176.198.196:3306 TCP) from module Firewall
Mar 20 20:54:28: [Minor] Port Scan is detected (115.115.231.222:64316->176.176.198.196:3128 TCP) from module Firewall
Mar 20 20:54:08: [Minor] Port Scan is detected (114.114.119.5:47495->176.176.198.196:22 TCP) from module Firewall
Mar 20 20:53:53: [Minor] Port Scan is detected (190.190.91.59:4668->176.176.198.196:23 TCP) from module Firewall


Ist euch eigentlich schon mal aufgefallen, dass die "Angreifer"adressen alle mit verdoppeltem AnfangsOktett beginnen?
Das kann eigentlich nicht sein.

EDIT: das Gleiche gillt auch für die "angegriffenen" Adressen :wand: :hirnbump:

-NoGi
Zuletzt geändert von NoGi am 22.03.2016, 00:12, insgesamt 1-mal geändert.
NoGi
Übergeordneter Verstärkerpunkt
 
Beiträge: 572
Registriert: 08.11.2012, 11:59
Wohnort: Metropolregion Rhein-Neckar

Re: Horizon meldet Firewall Warnungen

Beitragvon no_brain » 21.03.2016, 23:26

Wenn es denn nicht sein kann, was kann es denn sein?

Ich bin gespannt, was der angekündigte Techniker mir mit Signalproblemen erklären will ...
no_brain
Kabelneuling
 
Beiträge: 2
Registriert: 18.10.2013, 21:40

Re: Horizon meldet Firewall Warnungen

Beitragvon NoGi » 22.03.2016, 00:10

no_brain hat geschrieben:Wenn es denn nicht sein kann, was kann es denn sein?

Ich bin gespannt, was der angekündigte Techniker mir mit Signalproblemen erklären will ...


Firmware Fehler in der Firewall??
Getriggert durch Signalprobleme? :brüll:

-NoGi
NoGi
Übergeordneter Verstärkerpunkt
 
Beiträge: 572
Registriert: 08.11.2012, 11:59
Wohnort: Metropolregion Rhein-Neckar

Re: Horizon meldet Firewall Warnungen

Beitragvon uschgu » 22.03.2016, 16:33

Das mit den doppelten Oktetten 1&2 ist mir auch schon aufgefallen... Die Oktette 2-4 der Ziel-IP stimmen mit den ersten drei meiner WAN-IP überein. Ihr könnt ja mal prüfen, ob das bei euch auch der Fall ist.
Vielleicht ist es wirklich ein SW-Problem. Könnte mir vorstellen, dass es z.B. was mit dem IPv6-IPv4 Routing zu tun hat.

Bei UM werden wir wohl keine Hilfe bekommen. Ich finde es echt erbärmlich, dass man dort einfach mit "keine Ahnung" abgespeist wird. Laut Samsung verwendet UM eine eigene Firmware, also muss es eigentlich irgendjemanden geben, der zumindest einen Hauch von Ahnung hat...

Tomkee1220 hat mir bestätigt, dass er eine Austausch-Box bekommen hat und es seit dem nicht mehr aufgetreten ist. Aber das ist für mich auch keine Lösung. Ich möchte meine Aufnahmen behalten und zudem glaube ich nicht, dass es auf lange Sicht was bringt.
Benutzeravatar
uschgu
Kabelneuling
 
Beiträge: 3
Registriert: 08.03.2016, 20:57
Wohnort: Köln

Nächste

Zurück zu Digital-Receiver, TV-Geräte, CI Plus-Module, Smartcard usw.

Wer ist online?

Mitglieder in diesem Forum: 0 Mitglieder und 12 Gäste