Port Scan

[Norbert Koch]

> Does anyone know what could be causing this?  Some of these are probes
> from external IP's, but a lot of these are the servers probing itself.
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 

squid http proxy?


> > Connection attempt to UDP 206.123.80.170:1026 from 
> > 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:1027 
> > from 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:137

netbios-ns request to a samba server?


Norbert