Hi all,

Since last friday, i'm faced with this type of TCP scans:

May  1  202.216.031.203 -> 137.017.103.159 tcp   1008 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp   1524 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp   2400 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp   5300 (4)
May  1  202.216.031.203 -> 137.017.103.159 tcp   6723 (4)
May  1  202.216.031.203 -> 137.017.103.159 tcp   8282 (1)
May  1  202.216.031.203 -> 137.017.103.159 tcp   9112 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp   9705 (1)
May  1  202.216.031.203 -> 137.017.103.159 tcp  10008 (1)
May  1  202.216.031.203 -> 137.017.103.159 tcp  11753 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp  12345 (1)
May  1  202.216.031.203 -> 137.017.103.159 tcp  15104 (1)
May  1  202.216.031.203 -> 137.017.103.159 tcp  22252 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp  29369 (2)
May  1  202.216.031.203 -> 137.017.103.159 tcp  31337 (2)
May  1  202.216.031.203 -> 137.017.103.159 tcp  33567 (3)
May  1  202.216.031.203 -> 137.017.103.159 tcp  60008 (1)

They increase by the day and seem to come from the whole universe. I know that most of 
this are suspicious ports;
12345 Subseven, 31337 BO2 a.s.o.

But why since the last few days? New type of backdoor program??
My ISP hasn't changed their deny policy (they said) :-S

Thank you for your help
Regards,
Mark

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to