Re: Re: Thousands of attempts to port 35825 and 11090

Thanks for the replies.  Perhaps I failed to mention that this is a "pers=
onal" fw/router (a Netgear FR314P) so the full packet dumps etc. that you=
 folks are looking for aren't there.  About the only question I can answe=
r is that it was 99% UDP.  The source ports seemed to be all over the pla=
ce (I didn't notice a pattern).  The frequency seemed "steady" but it was=
n't coming from one particular address "alot".

Long story short, I managed to get another IP assigned to the WAN port of=
 the router (DHCP gave me the same one all weekend no matter what I tried=
).  All seems quiet.

I just find it odd that there isn't a mention of these ports "anywhere", =
but yet looking at Dshield seems to indicate a bit of activity.

Anyways ... note to the Chinese folks, there are no national secrets nor =
financial institutions in my basement!

Cheers,
Art

-------------------------------------------------------------------------=
-----
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Ve=
gas.=20
World renowned security experts reveal tomorrow's threats today. Free of=20
vendor pitches, the Briefings are designed to be pragmatic regardless of =
your=20
security environment. Featuring 36 hands-on training courses and 10 confe=
rence=20
tracks, networking opportunities with over 2,500 delegates from 40+ natio=
ns.=20

http://www.blackhat.com
-------------------------------------------------------------------------=
-----