My router's logs say all of the packets are UDP. I would suspect random attacks, but these are from all over the globe and all targeting port 10755.
I'm beginning to think that, since I have a dynamic IP through AT&T, that the previous owner was hosting something and now I'm catching the fallout... I might try rebooting the modem when I get home and hope I get a different address. On Thu, Apr 22, 2010 at 3:45 PM, Deny IP Any Any <[email protected]>wrote: > On Thu, Apr 22, 2010 at 3:21 PM, Paul Spicer <[email protected]> > wrote: > > These mystery packets that keep getting sent to me... Is there a tool I > can > > use to capture some and try to find out what exactly they're trying to > do? > > > > You can, but it is almost (99.99999%) not worth it. Random people on > the internet are scanning for all sorts of things, and you'll see an > endless supply of 'noise' on your firewall if you choose to pay > attention to it. Besides, depending on the protocol they used (TCP vs > UDP) you may not see anything at all (you might if its UDP, but the > first packet of a TCP connection is just a SYN, which isn't going to > have any content of interest in it) > > > -- > deny ip any any (4393649193 matches) >
