Θύρα σάρωσης αποκλείστηκε

[jonhh]

Καλημέρα,

 

Αρκετές φορές το bitDefender μου βγάζει ένα μνμ

Η θύρα σάρωσης αποκλείστηκε

Μια σάρωση θύρας εντοπίστηκε και αποκλείστηκε. Απομακρυσμένη IP: 185.10.224.66

 

 

κοιταξα που αντιστοιχεί η IP και βρήκα

NetRange: 192.68.0.0 - 192.68.19.255

CIDR: 192.68.16.0/22, 192.68.0.0/20

NetName: RIPE-ERX-192-68-0-0

NetHandle: NET-192-68-0-0-1

Parent: NET192 (NET-192-0-0-0-0)

NetType: Early Registrations, Transferred to RIPE NCC

OriginAS: 

Organization: RIPE Network Coordination Centre (RIPE)

RegDate: 2005-02-28

Updated: 2005-02-28

Comment: These addresses have been further assigned to users in

Comment: the RIPE NCC region. Contact information can be found in

Comment: the RIPE database at http://www.ripe.net/whois

Ref: https://whois.arin.net/rest/net/NET-192-68-0-0-1

 

ResourceLink: https://apps.db.ripe.net/search/query.html

ResourceLink: whois.ripe.net

 

OrgName: RIPE Network Coordination Centre

OrgId: RIPE

Address: P.O. Box 10096

City: Amsterdam

StateProv: 

PostalCode: 1001EB

Country: NL

RegDate: 

Updated: 2013-07-29

Ref: https://whois.arin.net/rest/org/RIPE

 

ReferralServer: whois://whois.ripe.net

ResourceLink: https://apps.db.ripe.net/search/query.html

 

OrgAbuseHandle: ABUSE3850-ARIN

OrgAbuseName: Abuse Contact

OrgAbusePhone: +31205354444 

OrgAbuseEmail: [email protected]<script data-cfhash='f9e31' type="text/javascript">/* */</script>

OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3850-ARIN

 

OrgTechHandle: RNO29-ARIN

OrgTechName: RIPE NCC Operations

OrgTechPhone: +31 20 535 4444 

OrgTechEmail: [email protected]

OrgTechRef: https://whois.arin.net/rest/poc/RNO29-ARIN

 

και μια άλλη φορά με μια άλλη IP

% This is the RIPE Database query service.

% The objects are in RPSL format.

%

% The RIPE Database is subject to Terms and Conditions.

% See http://www.ripe.net/db/support/db-terms-conditions.pdf

 

% Note: this output has been filtered.

% To receive output for a database update, use the "-B" flag.

 

% Information related to '185.10.224.0 - 185.10.224.255'

 

% Abuse contact for '185.10.224.0 - 185.10.224.255' is '[email protected]'

 

inetnum: 185.10.224.0 - 185.10.224.255

netname: EDIFICOM-NET1

descr: Edificom Datacenter Infrastructure

country: CH

geoloc: 46.54634705376861 6.573343276977539

admin-c: FC11747-RIPE

admin-c: CB11899-RIPE

tech-c: CB11899-RIPE

tech-c: SH10544-RIPE

status: ASSIGNED PA

mnt-by: CB68964-MNT

created: 2012-11-23T11:35:54Z

last-modified: 2014-10-23T09:04:23Z

source: RIPE

 

person: Carsten Buchenau

address: Edifice Communications SA

address: Rue de Geneve 17

address: 1003 Lausanne

address: Switzerland

phone: +41213132313

nic-hdl: CB11899-RIPE

mnt-by: CB68964-MNT

created: 2012-11-20T09:02:17Z

last-modified: 2012-11-20T09:02:19Z

source: RIPE Filtered

 

person: Fabrice Consenti

address: Edifice Communications SA

address: Rue de Geneve 17

address: 1003 Lausanne

address: Switzerland

phone: +41213132313

nic-hdl: FC11747-RIPE

mnt-by: CB68964-MNT

created: 2012-11-20T10:05:40Z

last-modified: 2012-11-20T10:05:40Z

source: RIPE Filtered

 

person: Simon Hogg

address: Edifice Communications SA

address: Rue de Geneve 17

address: 1003 Lausanne

address: Switzerland

phone: +41213132313

nic-hdl: SH10544-RIPE

mnt-by: CB68964-MNT

created: 2012-11-20T09:58:46Z

last-modified: 2012-11-20T10:08:25Z

source: RIPE Filtered

 

% Information related to '185.10.224.0/22AS199562'

 

route: 185.10.224.0/22

descr: Routing all EDIFICOM PA space

origin: AS199562

mnt-by: CB68964-MNT

created: 2013-08-28T06:28:40Z

last-modified: 2013-08-28T06:28:40Z

source: RIPE

 

% This query was served by the RIPE Database Query Service version 1.86 (DB-2)

 

Ξέρετε για ποιο λόγο βγαίνει το μνμ? Να ανησυχώ μήπως έχω κολλήσει κανα ιό?

[mad-proffessor]

port scanning σου κανουν για να δουνε τι υπηρεσιες τρεχεις. Συνηθως τετοιου ειδους σκαναρισματα γινονται απο automated bots/scripts.Αυτο δε σημαινει οτι κολλησες καποιο ζουζουνι/malware αλλα κανε ενα ελεγχο.