|
Unusual port activity: Friend or Foe? [213.106.113.200]
I have been noticing an alarming amount of †˜logâà¢Ã¢â‚¬Å¡Ã‚¬Ã¢â€ž ‚¢ activity to/from someone in the same IP range as myself. I have been letting it pass, but its become much more of an issue now that its become †˜ever regularââ‚à ‚¬Ã¢â€žÂ¢ and at unusual times of the day (often during the night) ..
I am in the IP range of:
spc1-ward1-5-0-custXX.bagu.broadband.ntl.com (213.106.113.XX)
and the †˜friend or foeââ‚ ¬ÃƒÂ¢Ã¢â‚¬Å¾Ã‚¢ is:
spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200]
Now, with the last IP digit being a perfect †œ200âà ƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã‚ Iâ₠™ve been presuming that its some normal activity but it does seem highly unlikely with log activity of the following:
[CURRENT LATEST LOG EVENT]
02/09/2004 18:44:25 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2630
02/09/2004 18:43:03 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2067
02/09/2004 18:42:52 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 1966
02/09/2004 18:42:42 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 1903
02/09/2004 18:33:59 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2166
02/09/2004 18:27:39 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 3406
02/09/2004 18:27:39 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 3406
02/09/2004 18:25:10 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2405
02/09/2004 18:17:39 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 3138
02/09/2004 18:17:08 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2931
02/09/2004 18:16:32 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 2690
.
.
[CONTINUALLY]
.
.
02/09/2004 07:05:12 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 1440
02/09/2004 07:03:45 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 4712
02/09/2004 07:03:45 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 4712
02/09/2004 06:53:04 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 4211
02/09/2004 06:50:45 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] 3274
[LATEST START TIME]
.
.
This happens through the night, with breaks.. then starts up again; infact its just logged again as I've been writing this. I'd just like to know if if this is normal activity or not - its not something that I have ever noticed before, so I'm worried that both my Virus checker and Firewall is possibly missing something (especially with the late night incoming attempts)..
|