To any that might be interested, below is a list of ports, preceded by the frequency. Personally, I find it interesting that port 5038 is now of such interest to hackers. This data spans about a day of access attempts. A total of 67 systems (different source IP addresses) participated in this "survey".
These were logged when we dropped their packets. 1 137 1 1521 1 161 1 2049 27 21 1 21007 25 22 1 23 1 29007 1 3044 1 3049 2 3128 1 3145 1 3306 1 3389 1 345 1 3496 1 3543 1 40007 1 4300 1 4337 1 4343 60 443 1 445 1 4451 1 447 1 4730 2 4786 1 4949 2 5000 1761 5038 2130 5060 1 5432 1 5911 1 5985 1 7000 1 7070 1 7547 1 7786 42 80 1 8000 3 8080 5 8088 1 8443 1 873 1 8889 1 9124 2 9191 I hope those of you with internet accessible systems are following best practices! murf -- Steve Murphy
-- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- Astricon is coming up October 9-11! Signup is available at: https://www.asterisk.org/community/astricon-user-conference Check out the new Asterisk community forum at: https://community.asterisk.org/ New to Asterisk? Start here: https://wiki.asterisk.org/wiki/display/AST/Getting+Started asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users