Quote:
|
Originally Posted by Matth
Sounds like a case for http://www.ntlworld.com/netreport/ - unless you do, or have used filesharing, and they are polling for a fileshare port that you don't currently have operating.
As above, are they source or destination ports - I don't recognize the pattern. |
They are the "Remote" ports.. I had to chop off some of the other text as there would have been far too much per line..
02/09/2004 20:37:01 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] (Remote Port: 2791) (Local Port: 2745)
02/09/2004 20:41:48 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] (Remote Port: 4771) (Local Port: 2745)
02/09/2004 20:41:48 Blocked 3 Incoming TCP spc1-ward1-5-0-cust200.bagu.broadband.ntl.com [213.106.113.200] (Remote Port: 4773) (Local Port: 1025)
... as you can see, Remote & Local ports seem to vary.. Its just so strange to see this connection hitting me time after time, day after day.. hour after hour; i.e I got a little more concerned when the pattern seemed to be 2am.. 6am ..