Subito.it (ISP:KPNQwest Italia S.p.a.) tentativo intrusione ?
Inviato: venerdì 7 maggio 2010, 4:09
Ragazzi sto notando che il mio iptables blocca tantissime connessioni in ingresso provenienti da questi ip 109.168.127.170 e 109.168.127.176 su svariate porte.
Ecco il whois:
Ecco il whois:
Codice: Seleziona tutto
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '109.168.127.160 - 109.168.127.191'
inetnum: 109.168.127.160 - 109.168.127.191
netname: K-SUBI-SUBITOITSRL
descr: SUBITO.IT SRL
descr: MILANO MI
country: IT
admin-c: MF641-RIPE
tech-c: GM2292-RIPE
tech-c: MV957-RIPE
remarks: ---------------------------------
remarks: Abuse and SPAM: abuse@kpnqwest.it
remarks: ---------------------------------
status: ASSIGNED PA
mnt-by: AS5602-MNT
source: RIPE # Filtered
person: Marco Fiorentino
address: KPNQwest Italia S.p.a.
address: Via Leopardi, 9
address: I-20123 Milano - Italy
phone: +39 02 438191
fax-no: +39 02 48013716
e-mail: marco.fiorentino@kpnqwest.it
nic-hdl: MF641-RIPE
mnt-by: AS5602-MNT
source: RIPE # Filtered
person: Marcello Vago
address: KPNQwest Italia S.p.a.
address: via Leopardi, 9
address: I-20123 Milano - MI
address: Italy
phone: +39 02 438191
fax-no: +39 02 48013716
e-mail: marcello.vago@kpnqwest.it
e-mail: marcello@comm2000.it
nic-hdl: MV957-RIPE
mnt-by: AS5602-MNT
source: RIPE # Filtered
person: Gaetano Mercandalli
address: KPNQwest Italia S.p.a.
address: Via Leopardi, 9
address: I-20123 Milano - Italy
phone: +39 02 438191
fax-no: +39 02 48013716
e-mail: gaetano.mercandalli@kpnqwest.it
nic-hdl: GM2292-RIPE
mnt-by: AS5602-MNT
source: RIPE # Filtered
% Information related to '109.168.0.0/17AS5602'
route: 109.168.0.0/17
descr: KPNQwest Italia S.p.a. netblock
origin: AS5602
mnt-by: AS5602-MNT
source: RIPE # Filtered