[Dshield] Traffic on 1025, 6129, 2745, 80, 3127

Micheal Patterson micheal at tsgincorporated.com
Wed Mar 31 22:18:11 GMT 2004



----- Original Message ----- 
From: "Shawn Cox" <shawn.cox at pcca.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Wednesday, March 31, 2004 1:01 PM
Subject: [Dshield] Traffic on 1025, 6129, 2745, 80, 3127


> 2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
> %PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48566
dst
> outside:216.167.162.144/1025
> 2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
> %PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48573
dst
> outside:216.167.162.144/6129
> 2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
> %PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48562
dst
> outside:216.167.162.144/2745
> 2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
> %PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48575
dst
> outside:216.167.162.144/80
> 2004-03-31 10:58:45 Local4.Error lbkrtr-ciscopix-int Mar 31 2004 10:58:13:
> %PIX-3-106011: Deny inbound (No xlate) tcp src outside:12.25.200.5/48568
dst
> outside:216.167.162.144/3127
>
>
> I started getting pounded with this around 10:20 am central time.  I've
> logged 200,000 since then on 448 IP's. Any idea what it is?
>
> I'm sorry I don't have the authority to do any captures.
>
> --Shawn
>

Port 1025:  21526 hits today
Port 6129:  14933 hits today
Port 2745:  23548 hits today
Port 3127:  26621 hits today

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.






More information about the list mailing list