컴 세팅 후 해커들 난리
방화벽 ufw 으로 특정아이피만 허용한 상태에서 로그 확인 하면 특정포트가 열려 있는지 확인 하기 위하여 아이피를 돌아가면 접속 시도 로그아이피 하나를 조회하면 아이피 출발지가 루마니아로 나옴 내부 방화벽 설정이 중요하다는 반증
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 |
Sep 28 09:42:02 raspberrypi kernel: [594044.198293] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:62:00:00:00:f3:06:fd:6a SRC=193.27.228.100 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=25272 PROTO=TCP SPT=56767 DPT=9357 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:42:10 raspberrypi kernel: [594051.748371] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:08:00:2c:98:b9:00:00:ef:06:b3:28 SRC=104.167.85.18 DST=192.168.1.128 LEN=44 TOS=0x08 PREC=0x00 TTL=239 ID=39097 PROTO=TCP SPT=52704 DPT=11134 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:42:24 raspberrypi kernel: [594065.957621] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:a1:db:00:00:f2:06:40:80 SRC=176.113.115.214 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=41435 PROTO=TCP SPT=51175 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:42:49 raspberrypi kernel: [594090.544134] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:3c:82:8a:40:00:32:06:ad:d3 SRC=85.209.0.101 DST=192.168.1.128 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=33418 DF PROTO=TCP SPT=32306 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:42:50 raspberrypi kernel: [594091.545486] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:3c:82:8b:40:00:32:06:ad:d2 SRC=85.209.0.101 DST=192.168.1.128 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=33419 DF PROTO=TCP SPT=32306 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:43:06 raspberrypi kernel: [594108.177576] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:33:74:44:40:00:2f:11:65:09 SRC=184.105.247.218 DST=192.168.1.128 LEN=51 TOS=0x00 PREC=0x00 TTL=47 ID=29764 DF PROTO=UDP SPT=58548 DPT=623 LEN=31 Sep 28 09:43:42 raspberrypi kernel: [594143.739669] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:56:89:00:00:f3:06:09:9a SRC=193.27.228.100 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=22153 PROTO=TCP SPT=56767 DPT=8594 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:43:56 raspberrypi kernel: [594158.210673] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:39:d4:31:00:00:f5:11:34:cb SRC=89.248.160.150 DST=192.168.1.128 LEN=57 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=43871 DPT=40956 LEN=37 Sep 28 09:44:35 raspberrypi kernel: [594197.177943] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:39:d4:31:00:00:f5:11:90:a3 SRC=80.82.78.100 DST=192.168.1.128 LEN=57 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=UDP SPT=58213 DPT=40831 LEN=37 Sep 28 09:45:03 raspberrypi kernel: [594224.697444] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:aa:de:00:00:f3:06:b5:44 SRC=193.27.228.100 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=43742 PROTO=TCP SPT=56767 DPT=10417 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:45:20 raspberrypi kernel: [594241.807865] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:79:f5:00:00:f1:06:78:f2 SRC=185.193.90.250 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=31221 PROTO=TCP SPT=58706 DPT=3315 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:45:29 raspberrypi kernel: [594250.503754] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:b9:2f:00:00:f5:06:b3:66 SRC=80.82.70.187 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=47407 PROTO=TCP SPT=45876 DPT=8111 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:45:37 raspberrypi kernel: [594258.621702] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:00:24:00:00:f5:06:71:e3 SRC=80.82.65.74 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=36 PROTO=TCP SPT=52428 DPT=8060 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:46:21 raspberrypi kernel: [594302.515942] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:ca:d5:00:00:f5:06:ea:24 SRC=45.129.33.40 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=51925 PROTO=TCP SPT=41189 DPT=26009 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:46:26 raspberrypi kernel: [594307.616475] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:d4:31:00:00:f2:06:32:b9 SRC=139.162.116.22 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=50758 DPT=1755 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:46:28 raspberrypi kernel: [594309.716664] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:70:33:00:00:f3:06:9f:e0 SRC=159.203.85.196 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=28723 PROTO=TCP SPT=40562 DPT=30820 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:47:11 raspberrypi kernel: [594352.982391] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:e7:ca:00:00:f3:06:2f:d0 SRC=188.18.49.246 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=59338 PROTO=TCP SPT=44696 DPT=756 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:47:18 raspberrypi kernel: [594360.353835] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:3c:c9:22:40:00:33:06:b6:71 SRC=6.0.0.0 DST=192.168.1.128 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=51490 DF PROTO=TCP SPT=9052 DPT=15024 WINDOW=0 RES=0x00 SYN URGP=0 Sep 28 09:48:07 raspberrypi kernel: [594408.911973] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:3f:06:00:00:f5:06:c1:c4 SRC=185.156.73.60 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=16134 PROTO=TCP SPT=45362 DPT=14389 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:48:28 raspberrypi kernel: [594429.942883] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:08:00:2c:9f:d2:00:00:e8:06:50:68 SRC=92.63.196.33 DST=192.168.1.128 LEN=44 TOS=0x08 PREC=0x00 TTL=232 ID=40914 PROTO=TCP SPT=53707 DPT=54321 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:48:48 raspberrypi kernel: [594449.480361] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:d4:31:00:00:ef:06:cd:f1 SRC=83.97.20.31 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=40521 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:48:50 raspberrypi kernel: [594451.528045] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:8a:47:00:00:ee:06:83:ac SRC=113.107.139.68 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=35399 PROTO=TCP SPT=49451 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:48:59 raspberrypi kernel: [594460.643349] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:f6:e2:00:00:f0:06:01:ea SRC=143.208.128.6 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=63202 PROTO=TCP SPT=49399 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:49:21 raspberrypi kernel: [594482.535578] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:32:48:00:00:f5:06:3f:d8 SRC=94.102.51.29 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=12872 PROTO=TCP SPT=47063 DPT=20001 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:49:32 raspberrypi kernel: [594493.422383] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:3a:4f:00:00:f3:06:25:d4 SRC=193.27.228.100 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=14927 PROTO=TCP SPT=56767 DPT=8779 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:50:13 raspberrypi kernel: [594534.496065] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:08:00:2c:40:de:00:00:1e:06:30:ac SRC=192.35.168.238 DST=192.168.1.128 LEN=44 TOS=0x08 PREC=0x00 TTL=30 ID=16606 PROTO=TCP SPT=26593 DPT=9501 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:50:17 raspberrypi kernel: [594539.197445] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:08:00:2c:73:a7:00:00:ea:06:51:08 SRC=46.161.27.75 DST=192.168.1.128 LEN=44 TOS=0x08 PREC=0x00 TTL=234 ID=29607 PROTO=TCP SPT=54642 DPT=2122 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:51:03 raspberrypi kernel: [594585.069587] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:18:e3:00:00:f3:06:7e:2d SRC=45.55.65.92 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=6371 PROTO=TCP SPT=52240 DPT=22536 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:51:12 raspberrypi kernel: [594594.081186] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:54:5d:00:00:f1:06:9e:8a SRC=185.193.90.250 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=21597 PROTO=TCP SPT=58706 DPT=3349 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:51:22 raspberrypi kernel: [594603.683996] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:9a:65:00:00:f1:06:58:82 SRC=185.193.90.250 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=39525 PROTO=TCP SPT=58706 DPT=53389 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:51:29 raspberrypi kernel: [594610.402709] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:8c:ae:00:00:2d:06:49:72 SRC=72.129.173.2 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=36014 PROTO=TCP SPT=20701 DPT=23 WINDOW=34100 RES=0x00 SYN URGP=0 Sep 28 09:51:51 raspberrypi kernel: [594632.541850] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:c8:63:00:00:22:06:e1:04 SRC=167.248.133.67 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=34 ID=51299 PROTO=TCP SPT=2353 DPT=5912 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:53:00 raspberrypi kernel: [594702.303759] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:e7:e7:00:00:f2:06:79:3b SRC=193.27.228.100 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=59367 PROTO=TCP SPT=56767 DPT=7462 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:53:06 raspberrypi kernel: [594707.918929] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:36:d2:00:00:f2:06:2d:08 SRC=87.251.74.206 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=14034 PROTO=TCP SPT=54896 DPT=50977 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:53:08 raspberrypi kernel: [594709.408165] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:46:85:00:00:f1:06:1e:55 SRC=87.251.74.206 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=18053 PROTO=TCP SPT=54923 DPT=46752 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:53:24 raspberrypi kernel: [594725.804540] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:08:00:2c:b4:a7:00:00:e8:06:00:1e SRC=80.66.83.147 DST=192.168.1.128 LEN=44 TOS=0x08 PREC=0x00 TTL=232 ID=46247 PROTO=TCP SPT=45328 DPT=30000 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:53:39 raspberrypi kernel: [594740.664723] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:d6:71:00:00:eb:06:f4:e0 SRC=118.186.203.150 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=54897 PROTO=TCP SPT=49246 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:54:03 raspberrypi kernel: [594764.575753] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:d4:31:00:00:f3:06:83:79 SRC=192.241.237.6 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=45893 DPT=13332 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:54:18 raspberrypi kernel: [594780.136766] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:34:2e:83:40:00:6b:06:ab:7b SRC=138.59.233.97 DST=192.168.1.128 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=11907 DF PROTO=TCP SPT=54899 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Sep 28 09:54:48 raspberrypi kernel: [594810.097902] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:28:dc:f4:00:00:2f:06:7b:37 SRC=69.10.44.114 DST=192.168.1.128 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=56564 PROTO=TCP SPT=80 DPT=10241 WINDOW=16384 RES=0x00 ACK URGP=0 Sep 28 09:54:50 raspberrypi kernel: [594811.720672] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:28:00:2e:d4:31:00:00:ee:11:b2:14 SRC=23.238.108.58 DST=192.168.1.128 LEN=46 TOS=0x08 PREC=0x20 TTL=238 ID=54321 PROTO=UDP SPT=36574 DPT=123 LEN=26 Sep 28 09:55:11 raspberrypi kernel: [594833.102477] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:0b:fa:00:00:f5:06:b1:16 SRC=185.216.140.186 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=3066 PROTO=TCP SPT=48207 DPT=53281 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:55:47 raspberrypi kernel: [594868.871873] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:28:47:eb:00:00:2f:06:10:41 SRC=69.10.44.114 DST=192.168.1.128 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=18411 PROTO=TCP SPT=80 DPT=52524 WINDOW=16384 RES=0x00 ACK URGP=0 Sep 28 09:56:26 raspberrypi kernel: [594908.187729] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:d4:31:00:00:f5:06:9d:94 SRC=94.102.51.119 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=54379 DPT=85 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 28 09:56:40 raspberrypi kernel: [594921.876498] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:1f:c1:00:00:f5:06:94:ca SRC=45.129.33.151 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=8129 PROTO=TCP SPT=41378 DPT=3344 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:56:58 raspberrypi kernel: [594940.031893] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:a7:b3:00:00:f2:06:39:a3 SRC=139.138.153.194 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=42931 PROTO=TCP SPT=53737 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 28 09:57:11 raspberrypi kernel: [594953.372913] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:01:00:00:00:62:06:f2:a7 SRC=89.40.73.212 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=98 ID=256 PROTO=TCP SPT=6000 DPT=8899 WINDOW=16384 RES=0x00 SYN URGP=0 Sep 28 09:57:11 raspberrypi kernel: [594953.375298] [UFW BLOCK] IN=eth0 OUT= MAC=00:27:eb:45:12:b3:64:ee:b7:8a:4e:81:08:00:45:00:00:2c:01:00:00:00:63:06:f1:a7 SRC=89.40.73.212 DST=192.168.1.128 LEN=44 TOS=0x00 PREC=0x00 TTL=99 ID=256 PROTO=TCP SPT=6000 DPT=8085 WINDOW=16384 RES=0x00 SYN URGP=0 |