Ubuntu Suomen keskustelualueet
Muut alueet => Yleistä keskustelua => Aiheen aloitti: f0nzarelli - 30.12.06 - klo:20.45
-
Mua on jo hetken aikaa ihmetyttänyt 85.116.31.2 IP:stä tulevat vierailut. Ne ovat aina 4 peräkkäin ja 5 minuutin välein. Onkos muilla vastaavia vierailuita kyseisetä IP-osoiteesta? Voisko se olla joku porttiskanneri (ro)botti? ???
Olen koittanut pingiä ja traceroutea tuohon osoitteeseen, mutta se plokkaa pingaukset...
Pieni pätkä logista (kyseisen IP:n osalta):
pvm - klo | IP | kohde
-------------------------------------------------
22.12.2006 - 16:29 | 85.116.31.2 | /index.php
22.12.2006 - 16:34 | 85.116.31.2 | /index.php
22.12.2006 - 16:39 | 85.116.31.2 | /index.php
22.12.2006 - 16:44 | 85.116.31.2 | /index.php
23.12.2006 - 17:31 | 85.116.31.2 | /index.php
23.12.2006 - 17:36 | 85.116.31.2 | /index.php
23.12.2006 - 17:41 | 85.116.31.2 | /index.php
23.12.2006 - 17:46 | 85.116.31.2 | /index.php
27.12.2006 - 04:47 | 85.116.31.2 | /index.php
27.12.2006 - 04:52 | 85.116.31.2 | /index.php
27.12.2006 - 04:57 | 85.116.31.2 | /index.php
27.12.2006 - 05:02 | 85.116.31.2 | /index.php
28.12.2006 - 22:42 | 85.116.31.2 | /index.php
28.12.2006 - 22:47 | 85.116.31.2 | /index.php
28.12.2006 - 22:52 | 85.116.31.2 | /index.php
28.12.2006 - 22:57 | 85.116.31.2 | /index.php
30.12.2006 - 20:26 | 85.116.31.2 | /index.php
30.12.2006 - 20:31 | 85.116.31.2 | /index.php
30.12.2006 - 20:36 | 85.116.31.2 | /index.php
30.12.2006 - 20:41 | 85.116.31.2 | /index.php
-
tommi@dsl-elmo:~/linuxdc/linuxdcpp$ whois 85.116.31.2
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '85.116.31.0 - 85.116.31.3'
inetnum: 85.116.31.0 - 85.116.31.3
netname: KEWLIO-QUAKENET
descr: IRC Infrastructure
descr: NOTE: 85.116.31.2 runs the 'PROXYSCANNER' for the
descr: QuakeNet IRC Network.
descr: It will only scan you if you connect to the IRC network.
descr: For More Information see:
descr: http://www.quakenet.org/openproxies.html
descr: If you were scanned by that IP and believe you do not
descr: connect to QuakeNet - We suggest you get your system
descr: checked by a Virus/Trojan Scanner.
country: GB
admin-c: KDNL
tech-c: KDNL
org: ORG-KL14-RIPE
status: ASSIGNED PA
mnt-by: KEWLIO-MNT
mnt-irt: IRT-KEWLIO
source: RIPE # Filtered
organisation: ORG-KL14-RIPE
org-name: Kewlio.net Limited
org-type: LIR
remarks: Abuse complaints to abuse@kewlio.net
address: 21 Severn Drive
Telford
address: TF1 3JP
address: Shropshire
address: United Kingdom
phone: +448450034120
fax-no: +448454580544
admin-c: DJA97
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: KEWLIO-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: Kewlio.net Limited Hostmaster
address: 21 Severn Drive
address: Telford
address: Shropshire
address: TF1 3JP
address: United Kingdom
phone: +44 (0) 845 0034120 # UK/Europe
phone: +1 231 538-3329 # USA
fax-no: +44 (0) 845 458 0544
remarks: trouble: +------------------------------------+
remarks: trouble: | All abuse reports MUST be sent to: |
remarks: trouble: | |
remarks: trouble: | abuse@kewlio.net |
remarks: trouble: | |
remarks: trouble: | and NOT to any other address |
remarks: trouble: +------------------------------------+
org: ORG-KL14-RIPE
admin-c: DJA97 # Daniel Austin
tech-c: DJA97 # Daniel Austin
nic-hdl: KDNL
mnt-by: KEWLIO-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@kewlio.net
% Information related to '85.116.0.0/19AS3344'
route: 85.116.0.0/19
descr: KDNL-RT
origin: AS3344
mnt-by: KEWLIO-MNT
mnt-routes: KEWLIO-MNT
org: ORG-KL14-RIPE
source: RIPE # Filtered
organisation: ORG-KL14-RIPE
org-name: Kewlio.net Limited
org-type: LIR
remarks: Abuse complaints to abuse@kewlio.net
address: 21 Severn Drive
Telford
address: TF1 3JP
address: Shropshire
address: United Kingdom
phone: +448450034120
fax-no: +448454580544
admin-c: DJA97
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: KEWLIO-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
-
Tulipas (taas) todistettua se oma tyhmyys :P Quakenetin osotehan se oli......
Ei mul ollu mitään käryy tosta whois-käskystä..
Kiitos ja kumarrus :)