Sub-Seven? Korea? July 27?
Did I miss something in the news? Was there some kind of major hacker attack coming from Korea on July 27 or something?
Repeated alerts to my Zone Alarm while I was working at the computer this morning sent me checking my Zone Alarm logs, which I hadn't done in weeks. Since I'm not that knowledgeable about what the logs all mean, I use Zone Log Analyzer, which color codes various types of alerts to help me understand some of it. (Yes, I've tried reading about it, but this old brain has a hard time comprehending a lot of what I read.) As it turned out, this morning's alerts were all coded "harmless." (Nonetheless, I may want to look into this later.) But looking back over the past few weeks logs, I was startled to see the logs for July 27.
Since I've been on cable with my current ISP, I normally get maybe eight to twelve alerts a day, and rarely is even one of those coded as a possible attempt to attach to a trojan server. But on July 27, there were 45 alerts, 37 of which were to port 27374, a known trojan port. I didn't look up all of these entries, but I did check 20 of them, of which 15 originated in Korea. One additional originated in China. The interesting thing is that only two of these were from the same IP address.
The next day all this stopped just as suddenly as it started. I was back to only nine alerts with zero coded for possible trojans. In fact, I haven't had any coded for possible trojans since.
Can anyone shed any light on this for me? I'm attaching the log for July 27 in the event anyone thinks you might spot something helpful to understanding this. (I substituted xxx's for part of my own address.)
