I'd like to thank all for their responses. Everyone was a great help! Simple.... one of your cisco routers has your unix box listed as a syslog host-- those are error messages from a Cisco, not a Solaris box. However, your cisco is seeing packets which are explicitly denied due to access lists. Port 80 is an incoming web request from somewhere to one of paranet's servers > I've noticed a few things scrolling through syslog the past few days. I > was wondering if anyone could tell me what these messages are? At firstI > thought it might be some type of port scan or attack? Not sure. > > Aug 30 17:58:56 rtrhou3.paranet.com 7543: %SEC-6-IPACCESSLOGP: list 103 > denied tcp 216.122.86.85(80) -> 199.164.1 > 31.71(1173), 1 packet > Aug 31 09:20:58 rtrhou3.paranet.com 7544: %SEC-6-IPACCESSLOGP: list 103 > denied tcp 203.147.251.110(59) -> 199.164 > .131.87(2351), 1 packet > > Any info would be greatly appreciated. Thanks!Received on Fri Aug 31 19:10:30 2001
This archive was generated by hypermail 2.1.8 : Wed Mar 23 2016 - 16:25:03 EDT