[Dshield] Help with firewall logs - outbound traffic from ownsubnet, on remote port.

Steve itmanager at rjl-pensions.com
Mon Jan 19 13:30:19 GMT 2004


 HERE IS THE LOG, SORRY.

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of Steve
Sent: Monday, January 19, 2004 12:37 AM
To: 'General DShield Discussion List'
Subject: [Dshield] Help with firewall logs - outbound traffic from
ownsubnet, on remote port.

I need someone to help me make sense of my firewall log. There is a text
file attached with the listings. My IP is 192.168.2.50--

I'm interested in the outbound connections from my subnet, I don’t
understand why this is showing up.

I am running a simple off the shelf NAT router with wireless enabled- I have
128 WEP encryption, and restricted access by MAC address so It doesn’t seem
that someone is connecting to my LAN but I haven't seen these types of
connections before.

Any help would be appreciated thanks.

Steve

 

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of Mark Tombaugh
Sent: Sunday, January 18, 2004 11:08 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Port 6129 (DameWare) and 3643 (audiojuggler) Scans

On Sunday 18 January 2004 3:05 pm, Jon R. Kibler wrote:
> Greetings:
>
> Anyone know why the big jump in port 6129/tcp scans?

<http://www.securiteam.com/windowsntfocus/6N00B1P95I.html>

-- 
   Mark Tombaugh <mtombaugh at alliedcc.com>
   Allied Computer Corporation <http://www.alliedcc.com>
   USiHOST, iNC. <http://www.usihost.com>


_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.562 / Virus Database: 354 - Release Date: 1/16/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.562 / Virus Database: 354 - Release Date: 1/16/2004
 

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.562 / Virus Database: 354 - Release Date: 1/16/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.562 / Virus Database: 354 - Release Date: 1/16/2004
 
  
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: report.txt
Url: http://www.dshield.org/pipermail/list/attachments/20040119/58742e4b/report.txt


More information about the list mailing list