Re: ISA alert

  • From: unitemp_edv@xxxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Fri, 15 Feb 2002 01:23:50 -0700

I checked my IP logs, and here's what i found (194.209.71.124 is my
firewall IP address) :

2/13/2002, 10:49:06, 195.186.6.22, 194.209.71.124, Tcp, 80, 11808, FIN ACK
, BLOCKED, 194.209.71.124, 45 00 00 28 0d a9 40 00 36 06 63 09 c3 ba 06 16
c2 d1 47 7c, 00 50 2e 20 85 63 43 6e b8 42 b6 b7 50 11 60 f4 14 85 00 00


2/13/2002, 2:07:14, 194.209.71.124, 164.128.36.34, Tcp, 60812, 53, SYN ,
BLOCKED, 194.209.71.124, 45 00 00 30 97 21 40 00 80 06 00 00 c2 d1 47 7c
a4 80 24 22, ed 8c 00 35 d3 e5 1b 7f 00 00 00 00 70 02 40 00 93 08 00 00
02 04 05 b4 01 01 04 02
2/13/2002, 2:07:29, 194.209.71.124, 164.128.36.34, Tcp, 60819, 53, SYN ,
BLOCKED, 194.209.71.124, 45 00 00 30 97 29 40 00 80 06 00 00 c2 d1 47 7c
a4 80 24 22, ed 93 00 35 d4 36 c8 36 00 00 00 00 70 02 40 00 e5 f8 00 00
02 04 05 b4 01 01 04 02
2/13/2002, 2:07:35, 194.209.71.124, 164.128.36.34, Tcp, 60819, 53, SYN ,
BLOCKED, 194.209.71.124, 45 00 00 30 97 2a 40 00 80 06 00 00 c2 d1 47 7c
a4 80 24 22, ed 93 00 35 d4 36 c8 36 00 00 00 00 70 02 40 00 e5 f8 00 00
02 04 05 b4 01 01 04 02
2/13/2002, 2:07:50, 194.209.71.124, 164.128.36.34, Tcp, 60826, 53, SYN ,
BLOCKED, 194.209.71.124, 45 00 00 30 97 41 40 00 80 06 00 00 c2 d1 47 7c
a4 80 24 22, ed 9a 00 35 d4 88 48 02 00 00 00 00 70 02 40 00 65 d4 00 00
02 04 05 b4 01 01 04 02
2/13/2002, 2:07:56, 194.209.71.124, 164.128.36.34, Tcp, 60826, 53, SYN ,
BLOCKED, 194.209.71.124, 45 00 00 30 97 42 40 00 80 06 00 00 c2 d1 47 7c
a4 80 24 22, ed 9a 00 35 d4 88 48 02 00 00 00 00 70 02 40 00 65 d4 00 00
02 04 05 b4 01 01 04 02

I dont know if that can help, but thank you very much
Arnaud



Other related posts: