Within the local network, are you sure no one is using any P2P download programs or torrent download s/w?
These programs are notorious in sniffing out open ports to connect to the outside world. Once they find an open port to use, these programs will establish an outbound connection. Most firewalls will have the de-facto rule "Allow all outgoing" but "Block all incoming". But once a connection is made and your firewall rules do not allow connections from the outside, then they might be captured as an unrecognized attempt. Regards, JG _____ From: [email protected] [mailto:[email protected]] On Behalf Of Danny Ching Sent: Monday, June 29, 2009 9:42 AM To: PLUG Subject: [plug] UDP:21218 Is my network under attack? I have the following log from my router. Monday June 29, 2009 09:33:59 Unrecognized attempt blocked from 212.118.142.74:25801 to x.x.x.x UDP:21218 Monday June 29, 2009 09:33:59 Unrecognized attempt blocked from 202.161.75.110:19532 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:00 Unrecognized attempt blocked from 142.165.130.226:35204 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:00 Unrecognized attempt blocked from 80.184.5.226:19250 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:02 Unrecognized attempt blocked from 212.118.142.74:25801 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:02 Unrecognized attempt blocked from 93.86.218.101:59572 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:04 Unrecognized attempt blocked from 80.184.5.226:19250 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:05 Unrecognized attempt blocked from 212.118.142.74:25801 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:06 Unrecognized attempt blocked from 82.134.233.161:60237 to x.x.x.x UDP:21218 Monday June 29, 2009 09:34:08 Unrecognized attempt blocked from 86.97.151.93:63060 to x.x.x.x UDP:21218 Anybody know why my port 21218 is so significant? What is it used for? -- Regards, Danny Ching
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
