Rodney M Dyer wrote:
> We are checking into possible probing (hacking) attempts on our AFS file
> servers.  We are seeing one address (24.74.66.175) that our fileserver
> needs to perform a callback on and it fails.  The problem is that it
> seems to fail on port numbers that are increasing by 12 each time.  The
> following logs show this "probing"...

This looks like a NAT that has a very short timer on the UDP port
mapping table.

If you are concerned this is hack attempt, you can block the IP
address at the firewall and/or you can obtain a network capture
filtered on that address with Ethereal so that you can see what
it is requesting.

Jeffrey Altman
begin:vcard
fn:Jeffrey Altman
n:Altman;Jeffrey
org:Secure Endpoints Inc.
adr:;;255 W 94TH ST PHB;NEW YORK;NY;10025;United States
email;internet:[EMAIL PROTECTED]
title:President
tel;work:+1 212 769-9018
x-mozilla-html:TRUE
url:http://www.secure-endpoints.com
version:2.1
end:vcard

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to