Home page logo
/

basics logo Security Basics mailing list archives

Re: Firewall log help
From: "Michael Painter" <tvhawaii () shaka com>
Date: Mon, 6 Jun 2005 08:24:47 -1000

----- Original Message ----- From: "Michael Painter" <tvhawaii () shaka com>
Subject: Firewall log help


For the past couple of months, I have been getting many entries from IP addresses in China to my ports ending in a 9, such as 9219, 11619, 17219, 19619, 20019, 28019, 23219, 23619, 24019, etc.
They are from ports 80, 6000, 7000, 8000, and 58097 (over 900 last week from this fellow alone 61.151.239.10).

Anyone know what this could be?

Thanks,

--Michael

Should have included this in the first post.<sigh>

2005/06/06,08:08:54,-10:00, 61.145.10.48,80, 206.126.x.x,24819, TCP (flags:AS),1
2005/06/06,08:10:34,-10:00, 61.145.10.48,80, 206.126.x.x,11219, TCP (flags:AS),1
2005/06/06,08:14:04,-10:00, 61.145.10.48,80, 206.126.x.x,25619, TCP (flags:AS),1


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]