Skip to contentSkip to conversation

Strange traffic from a user ...

DISCUSSION Ray Leach 1 participant 2 messages Feb 5, 2004 – Feb 10, 2004

lore
Share & tools
lore

Ray Leach

author
#0 lore raw

Hi all

Can someone tell me what this is?

Feb  5 10:26:10 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0
SRC=10.0.0.122 DST=24.26.4.32 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=32898
DF PROTO=TCP SPT=1745 DPT=3022 WINDOW=64240 RES=0x00 SYN URGP=0
Feb  5 10:26:11 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0
SRC=10.0.0.122 DST=24.170.20.10 LEN=48 TOS=0x00 PREC=0x00 TTL=127
ID=33629 DF PROTO=TCP SPT=1788 DPT=1915 WINDOW=64240 RES=0x00 SYN URGP=0
Feb  5 10:26:12 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0
SRC=10.0.0.122 DST=24.92.38.155 LEN=48 TOS=0x00 PREC=0x00 TTL=127
ID=34070 DF PROTO=TCP SPT=1780 DPT=2034 WINDOW=64240 RES=0x00 SYN URGP=0
Feb  5 10:26:12 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0
SRC=10.0.0.122 DST=24.168.165.204 LEN=48 TOS=0x00 PREC=0x00 TTL=127
ID=34071 DF PROTO=TCP SPT=1781 DPT=3169 WINDOW=64240 RES=0x00 SYN URGP=0
Feb  5 10:26:12 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0
SRC=10.0.0.122 DST=24.47.6.119 LEN=48 TOS=0x00 PREC=0x00 TTL=127
ID=34072 DF PROTO=TCP SPT=1783 DPT=3595 WINDOW=64240 RES=0x00 SYN URGP=0
Feb  5 10:26:12 firefly kernel: DROP FORWARD INTERNAL: IN=eth2 OUT=eth0

SRC=10.0.0.122 DST=24.128.32.100 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=34412 DF PROTO=TCP SPT=1764 DPT=2962 WINDOW=64240 RES=0x00 SYN URGP=0

The destinations appear to be dialup ip addresses. Maybe a worm or spyware?

Regards

Ray

Signature · 7 lines
--
Raymond Leach <[email protected]>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD  00EE 8757 EE47 F06F FB28
--
author
#1 lore raw
Quoted 4 lines · Ray Leach

Hi all

Can someone tell me what this is?

<snip>

Quoted 3 lines

The destinations appear to be dialup ip addresses. Maybe a worm or spyware?

Or Kazaa ....

Quoted 3 lines

Regards

Ray

Signature · 7 lines
--
Raymond Leach <[email protected]>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD  00EE 8757 EE47 F06F FB28
--