Source Port 10000

Source Port 10000
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Source Port 10000 Jim 03-10-2006
Posted by Jim on March 10, 2006, 9:39 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am getting a lot of SP 10000 entries in my firewall. Any idea what
these are? They are listed as:
ndmp 10000/tcp Network Data Management Protocol

But I am not sure what that means. Is someone scanning me looking to see
if remote management is on?

03/10/2006-15:14:15:IP-FILTER: I:PROTO 17 (UDP) pkt from 216.115.21.69/10000
03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
03/10/2006-15:14:40:IP-FILTER: I:PROTO 17 (UDP) pkt from 69.59.240.102/10000
03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
03/10/2006-15:14:42:IP-FILTER: I:PROTO 17 (UDP) pkt from 69.59.240.102/10000
03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
03/10/2006-15:14:46:IP-FILTER: I:PROTO 17 (UDP) pkt from 69.59.240.102/10000
03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
03/10/2006-15:14:54:IP-FILTER: I:PROTO 17 (UDP) pkt from 69.59.240.102/10000
03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
03/10/2006-15:15:10:IP-FILTER: I:PROTO 17 (UDP) pkt from 69.59.240.102/10000
03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped

Thanks,

Jim

Posted by Bit Twister on March 10, 2006, 9:50 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Fri, 10 Mar 2006 09:39:32 -0500, Jim wrote:
> I am getting a lot of SP 10000 entries in my firewall. Any idea what
> these are? They are listed as:
> ndmp 10000/tcp Network Data Management Protocol
>
> But I am not sure what that means. Is someone scanning me looking to see
> if remote management is on?

Yes.

Posted by Winged on March 12, 2006, 3:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Jim wrote:
> I am getting a lot of SP 10000 entries in my firewall. Any idea what
> these are? They are listed as:
> ndmp 10000/tcp Network Data Management Protocol
>
> But I am not sure what that means. Is someone scanning me looking to see
> if remote management is on?
>
> 03/10/2006-15:14:15:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 216.115.21.69/10000
> 03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
> 03/10/2006-15:14:40:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 69.59.240.102/10000
> 03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
> 03/10/2006-15:14:42:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 69.59.240.102/10000
> 03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
> 03/10/2006-15:14:46:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 69.59.240.102/10000
> 03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
> 03/10/2006-15:14:54:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 69.59.240.102/10000
> 03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
> 03/10/2006-15:15:10:IP-FILTER: I:PROTO 17 (UDP) pkt from
> 69.59.240.102/10000
> 03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped
>
> Thanks,
>
> Jim
You using Vontage phone on your system?
Winged

Posted by Jim on March 13, 2006, 8:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Winged wrote on 3/12/2006 3:06 PM:
> Jim wrote:
>> I am getting a lot of SP 10000 entries in my firewall. Any idea what
>> these are? They are listed as:
>> ndmp 10000/tcp Network Data Management Protocol
>>
>> But I am not sure what that means. Is someone scanning me looking to
>> see if remote management is on?
>>
>> 03/10/2006-15:14:15:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 216.115.21.69/10000
>> 03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
>> 03/10/2006-15:14:40:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 69.59.240.102/10000
>> 03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
>> 03/10/2006-15:14:42:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 69.59.240.102/10000
>> 03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
>> 03/10/2006-15:14:46:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 69.59.240.102/10000
>> 03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
>> 03/10/2006-15:14:54:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 69.59.240.102/10000
>> 03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
>> 03/10/2006-15:15:10:IP-FILTER: I:PROTO 17 (UDP) pkt from
>> 69.59.240.102/10000
>> 03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped
>>
>> Thanks,
>>
>> Jim
> You using Vontage phone on your system?
> Winged

Yeah.. Good call.

Jim

Similar ThreadsPosted
Japan & China going Open Source... October 6, 2005, 11:58 pm
Open Source Taking Over Europe October 21, 2005, 10:36 pm
open source encryption software April 14, 2006, 9:39 am
Oregon State Gov is supporting Open Source... August 18, 2005, 4:37 am
Massachusetts is migrating to open-source software September 7, 2005, 2:46 am
Re: Open-source bug hunt results posted March 11, 2006, 2:46 pm
Re: Open-source bug hunt results posted March 11, 2006, 8:23 pm
Software writers spot open source in Sony BMG CDs November 20, 2005, 4:00 pm
identifying the source of suspicous outgoing network traffic October 22, 2006, 4:32 pm
How to identify the ultimate source of a spam type message?... name, address, telephone May 9, 2006, 5:54 pm

The site map in XML format XML site map

Contact Us | Privacy Policy