[juneau-lug] Firewall hits if you're curious

  • From: James Zuelow <e5z8652@xxxxxxxxxx>
  • To: Juneau Linux Users Group <juneau-lug@xxxxxxxxxxxxx>
  • Date: Sat, 23 Nov 2002 00:31:30 -0900 (AKST)

Here's the top hits I've gotten on my firewall lately, for the curious:

   5267 DPT=137
     75 DPT=135
     52 DPT=1433
     23 DPT=27374
     21 DPT=21
     11 DPT=4330
     11 DPT=3953
     11 DPT=1282
     10 DPT=443
     10 DPT=3309

There are another 51 ports that got hit, with 10 or less hits each. Port
80 & 25 aren't listed as they get routed to the web & mail servers. (Lots
of Nimda stuff still shows up on the web server logs, port 80 would
probably rank number 2 on this list.) My firewall logs used to be a couple
of hundred hits a day, now they're a thousand or more a day - mainly the
Windows share probes on port 137.

Cheers,

James




------------------------------------
This is the Juneau-LUG mailing list.
To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the 
word unsubscribe in the subject header.

Other related posts:

  • » [juneau-lug] Firewall hits if you're curious
  1. Home
  2. juneau-lug
  3. Archive
  4. 11-2002