[Dshield] From 127.0.0.1,80 ??

Louis Hablas Lou.Hablas at rzim.org
Mon Jan 19 15:14:11 GMT 2004


I'm wondering the same..

My ISA server alerted me about all-port scans from 127.0.0.1 multiple times
during the past 24 hours...

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
Behalf Of Jonathan C. Webster
Sent: Sunday, January 18, 2004 10:29 PM
To: list at dshield.org
Subject: [Dshield] From 127.0.0.1,80 ??


Hello,
In my last two firewall log files (spanning 16 hours of today) out of 256
entries 101 are from
127.0.0.1,80.  These are all to my ports from 1015 to 1986.  They only hit
the same port twice a few 
times and NEVER more than twice.

What does that mean?

I have a dynamic DSL connection on snet.net, currently their 64.252.xxx.xxx
subnet.

Jonathan Webster


_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list


The information contained in this message may be CONFIDENTIAL and is for the
intended addressee only.  Any unauthorized use, dissemination of the
information, or copying of this message is prohibited.  If you are not the
intended addressee, please notify the sender immediately and delete this
message.



More information about the list mailing list