Looks like IP half scans to me.
Andrew Bagrin
Secure-1
865-803-2748
www.secure-1.com
----- Original Message -----
From: Langa Kentane <[EMAIL PROTECTED]>
To: Firewall-1 Mailing List (E-mail)
<[EMAIL PROTECTED]>
Sent: Tuesday, January 09, 2001 7:34 AM
Subject: [FW1] possible port scan?
>
> I noticed on my logs today that someone was trying to connect to our
> firewall, the ports range from 34xxx to 37xxx, in random order. The
source
> port is udp 53 on all of them. The packets are getting dropped on the
> stealth rule. What could this be?
>
> __________________________________________________________
> Langa Kentane | TEL: (011) 290 3218
> Security Administrator | Cell: 082 606 1515
> DISCOVERY HEALTH | http://www.discoveryhealth.co.za
> __________________________________________________________________
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
