[NTLUG:Discuss] OT: Port scans

[Jeff Miller]

Jay Urish wrote:

> hmmm
> ButtSNIFF?
> maybe L0phtCrack?
> ida know..
>
> Jeff Miller wrote:
>
>> Jay Urish wrote:
>>
>>> What ports are being hit?
>>>
>>>
>> Seems to be rather random.  the last severy include 41808, 41869, 
>> 41792, 41845, 42311
>>
>> The first hit were:  22163, 22116, 22165 and so on.
>>
>> Looks somewhat random, but more or less going up from about 22000 
>> which seems rather odd to me.
>>
>> J
>>
>>
>> _______________________________________________
>> https://ntlug.org/mailman/listinfo/discuss
>
>
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss

either way, at this point the firewall is just loging an event and 
droping the packet.  Just figured that someone here might be running on 
SBC's DSL lines and might be seeing the same behaviour. 

J