[Dshield] Traffic on 1025, 6129, 2745, 80, 3127

Shawn Cox shawn.cox at pcca.com
Wed Mar 31 19:01:43 GMT 2004


2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
%PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48566 dst
outside:216.167.162.144/1025
2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
%PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48573 dst
outside:216.167.162.144/6129
2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
%PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48562 dst
outside:216.167.162.144/2745
2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
%PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48575 dst
outside:216.167.162.144/80
2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
%PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48568 dst
outside:216.167.162.144/3127


I started getting pounded with this around 10:20 am central time.  I've
logged 200,000 since then on 448 IP's. Any idea what it is?

I'm sorry I don't have the authority to do any captures.

--Shawn




More information about the list mailing list