[Dshield] What is the fun of this? Daily 70 packets to 1026 and 1027

Jonathan C. Webster jwebster03 at snet.net
Wed Mar 30 22:33:41 GMT 2005



jayjwa wrote:
> 
> On Mon, 28 Mar 2005, Freek de Kruijf wrote:
> 
> -> Since about a month and a half I get daily -> about 70 UDP packages 
> to the ports 1026 and 1027 from one IP-address -> 61.172.244.159 
> (Shanghai, China).
> 
Hello,
I see a few too from the same place.  ds.log is my accumulated firewall logs for dshield.

$ tail -10000 ds.log| grep "61.172.244.159"| cut -f4,7| sort -n|uniq -c
     573 61.172.244.159  1026
     172 61.172.244.159  1027
$ tail -10000 ds.log|head -1| cut -f1
2005-02-06 22:15:50 -05:00
$

Jonathan



More information about the list mailing list