Security Basics mailing list archives
Re: Firewall log help
From: "Michael Painter" <tvhawaii () shaka com>
Date: Mon, 6 Jun 2005 08:24:47 -1000
----- Original Message ----- From: "Michael Painter" <tvhawaii () shaka com>
Subject: Firewall log help
For the past couple of months, I have been getting many entries from IP addresses in China to my ports ending in a 9, such as 9219, 11619, 17219, 19619, 20019, 28019, 23219, 23619, 24019, etc.They are from ports 80, 6000, 7000, 8000, and 58097 (over 900 last week from this fellow alone 61.151.239.10). Anyone know what this could be? Thanks, --Michael
Should have included this in the first post.<sigh> 2005/06/06,08:08:54,-10:00, 61.145.10.48,80, 206.126.x.x,24819, TCP (flags:AS),1 2005/06/06,08:10:34,-10:00, 61.145.10.48,80, 206.126.x.x,11219, TCP (flags:AS),1 2005/06/06,08:14:04,-10:00, 61.145.10.48,80, 206.126.x.x,25619, TCP (flags:AS),1
Current thread:
- Firewall log help Michael Painter (Jun 06)
- Re: Firewall log help Michael Painter (Jun 06)
- <Possible follow-ups>
- Re: Firewall log help fnfspam (Jun 08)
