Firewall Log Humor

Printable View

October 10th, 2001, 03:53 AM
Simon Templer

Firewall Log Humor

Before I sign off tonight let me share with you the results of my firewall log, while being online only two hours!

Alerts from ZoneAlarm: 191 Alerts (Holy Smokes!)

Common Alert Cause (95%): Attempt to connect to port 6346

Most were from a handful of IP addresses...So naturally I assumed the worse and thought someone was attacking me...

A Google search turned up the following info:

Quote:

The Gnutella Network that currently uses programs such as Limewire and Bearshare, attempts to connect computers together through port 6346, 6347 or 6348.

Apparently, BearShare and Limewire take adavantage of what I assume is a "resume" feature, so whoever was sharing with these people HAD the IP I was dynamically assigned tonight...so when those people tried to connect for their files, I got bombarded with attempts to connect to port 6346

Ok... Now I'm up to 206 alerts 15 more in the few minutes it took to write this post!

Just a little tid-bit about port 6346...And how it drove me and my firewall crazy!
October 10th, 2001, 05:28 AM
lostit44

Thanks Simon I`m not the only one who`s Zone Alarm showed over 200 hits in only 5 hours one day, you`ve explained alot in a short space this is an unfortunate problem with dial-up access to the net.
October 10th, 2001, 05:41 AM
casper3699

The only time that i ever got that bad of hits was when the nimda virus was on the loose. Plus when i went to HackerWhacker.com and did a scan.:D
October 10th, 2001, 03:42 PM
Ennis

Last nite somebody spent an hour or so trying to scan me for the Netbus server and a Sub7 server, this type of thing upsets me.
Why?

Because these people are so ill-eduacated they dont realise the difference between giving up and just being annoying. God if I was so relaxed Id have hunted down the little bastard.
October 10th, 2001, 04:02 PM
Simon Templer

Sub7 & Netbus Scan

I know what you mean Ennis! I have people all the time scanning me multiple times for Sub7 and Netbus.

Somtimes I think that the easiest solution is to send an email to their ISP. That way the person will have to explain their actions!
October 10th, 2001, 04:14 PM
Ennis

I know but I usually let it slide as they are probably just kids trying to look "l33t". Anyway they have little chance of succeeding with such a well known security fault.
October 10th, 2001, 05:02 PM
ZeroOne

Quote:

Originally posted by Ennis
I know but I usually let it slide as they are probably just kids trying to look "l33t". Anyway they have little chance of succeeding with such a well known security fault.

I think this NetBuster might be a funny program... :D

-ZeroOne