[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Strange IPChains Log



> > > Nov 21 18:27:27 aegis kernel: Packet log: input DENY eth0 
> PROTO=17 
> > > 192.55.83.30:53 208 ###.###.###.###:1981 L=208 S=0x00 I=59474 
> > > F=0x0000 T=48
> > > (#52)
> > >
> > http://www.dshield.org/ports/port53.html
> > m.gtld-servers.net [192.55.83.30]
> >
> 
> Thanks, Dan.  What concerns me is the fact that ALL seem to 
> want to hit port 1981 on this system... is this normal?

A quick Google finds
http://cert.uni-stuttgart.de/archive/incidents/2001/05/msg00003.html
that sounds reasonable.
-- 
Dan Kriwitsky

Please reply to the list only. Offlist replies are not read.