--------- Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=* SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=35583 DF PROTO=TCP SPT=4102 DPT=1080 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=36095 DF PROTO=TCP SPT=4104 DPT=8080 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=36351 DF PROTO=TCP SPT=4105 DPT=81 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:24 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=3840 DF PROTO=TCP SPT=4106 DPT=8000 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:36 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=43008 DF PROTO=TCP SPT=4106 DPT=8000 WINDOW=32767 RES=0x00 SYN URGP=0
---------
I get this above scan, along with scans on default 1080/3128(or whatever
squids port is), and all of these are hourly, almost as if someone has
setup a cron job to scan my system on the hour each hour. Is this
normal? I've never seen it so prevelant in my system logs, so I figured
I'd post. Any ideas or comments would be greatly appreciated.
Adam
msg00382/pgp00000.pgp
Description: PGP signature
