Source Port 10000

Discussion in 'Computer Security' started by Jim, Mar 10, 2006.

  1. Jim

    Jim Guest

    I am getting a lot of SP 10000 entries in my firewall. Any idea what
    these are? They are listed as:
    ndmp 10000/tcp Network Data Management Protocol

    But I am not sure what that means. Is someone scanning me looking to see
    if remote management is on?

    03/10/2006-15:14:15:IP-FILTER: I:pROTO 17 (UDP) pkt from 216.115.21.69/10000
    03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
    03/10/2006-15:14:40:IP-FILTER: I:pROTO 17 (UDP) pkt from 69.59.240.102/10000
    03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
    03/10/2006-15:14:42:IP-FILTER: I:pROTO 17 (UDP) pkt from 69.59.240.102/10000
    03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
    03/10/2006-15:14:46:IP-FILTER: I:pROTO 17 (UDP) pkt from 69.59.240.102/10000
    03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
    03/10/2006-15:14:54:IP-FILTER: I:pROTO 17 (UDP) pkt from 69.59.240.102/10000
    03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
    03/10/2006-15:15:10:IP-FILTER: I:pROTO 17 (UDP) pkt from 69.59.240.102/10000
    03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped

    Thanks,

    Jim
    Jim, Mar 10, 2006
    #1
    1. Advertising

  2. Jim

    Bit Twister Guest

    On Fri, 10 Mar 2006 09:39:32 -0500, Jim wrote:
    > I am getting a lot of SP 10000 entries in my firewall. Any idea what
    > these are? They are listed as:
    > ndmp 10000/tcp Network Data Management Protocol
    >
    > But I am not sure what that means. Is someone scanning me looking to see
    > if remote management is on?


    Yes.
    Bit Twister, Mar 10, 2006
    #2
    1. Advertising

  3. Jim

    Winged Guest

    Jim wrote:
    > I am getting a lot of SP 10000 entries in my firewall. Any idea what
    > these are? They are listed as:
    > ndmp 10000/tcp Network Data Management Protocol
    >
    > But I am not sure what that means. Is someone scanning me looking to see
    > if remote management is on?
    >
    > 03/10/2006-15:14:15:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 216.115.21.69/10000
    > 03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
    > 03/10/2006-15:14:40:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 69.59.240.102/10000
    > 03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
    > 03/10/2006-15:14:42:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 69.59.240.102/10000
    > 03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
    > 03/10/2006-15:14:46:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 69.59.240.102/10000
    > 03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
    > 03/10/2006-15:14:54:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 69.59.240.102/10000
    > 03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
    > 03/10/2006-15:15:10:IP-FILTER: I:pROTO 17 (UDP) pkt from
    > 69.59.240.102/10000
    > 03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped
    >
    > Thanks,
    >
    > Jim

    You using Vontage phone on your system?
    Winged
    Winged, Mar 12, 2006
    #3
  4. Jim

    Jim Guest

    Winged wrote on 3/12/2006 3:06 PM:
    > Jim wrote:
    >> I am getting a lot of SP 10000 entries in my firewall. Any idea what
    >> these are? They are listed as:
    >> ndmp 10000/tcp Network Data Management Protocol
    >>
    >> But I am not sure what that means. Is someone scanning me looking to
    >> see if remote management is on?
    >>
    >> 03/10/2006-15:14:15:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 216.115.21.69/10000
    >> 03/10/2006-15:14:15:IP-FILTER: to 68.219.68.210/21255 dropped
    >> 03/10/2006-15:14:40:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 69.59.240.102/10000
    >> 03/10/2006-15:14:40:IP-FILTER: to 68.219.68.210/21255 dropped
    >> 03/10/2006-15:14:42:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 69.59.240.102/10000
    >> 03/10/2006-15:14:42:IP-FILTER: to 68.219.68.210/21255 dropped
    >> 03/10/2006-15:14:46:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 69.59.240.102/10000
    >> 03/10/2006-15:14:46:IP-FILTER: to 68.219.68.210/21255 dropped
    >> 03/10/2006-15:14:54:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 69.59.240.102/10000
    >> 03/10/2006-15:14:54:IP-FILTER: to 68.219.68.210/21255 dropped
    >> 03/10/2006-15:15:10:IP-FILTER: I:pROTO 17 (UDP) pkt from
    >> 69.59.240.102/10000
    >> 03/10/2006-15:15:10:IP-FILTER: to 68.219.68.210/21255 dropped
    >>
    >> Thanks,
    >>
    >> Jim

    > You using Vontage phone on your system?
    > Winged


    Yeah.. Good call.

    Jim
    Jim, Mar 13, 2006
    #4
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Kevin

    10000 Router CPU mib

    Kevin, Dec 1, 2003, in forum: Cisco
    Replies:
    4
    Views:
    1,429
    Walter Roberson
    Dec 2, 2003
  2. wfitzgerald

    Cisco VPN and port 10000

    wfitzgerald, Dec 5, 2003, in forum: Cisco
    Replies:
    2
    Views:
    3,667
    wfitzgerald
    Dec 7, 2003
  3. Andras Kende
    Replies:
    1
    Views:
    7,045
    Walter Roberson
    Apr 29, 2004
  4. Al
    Replies:
    4
    Views:
    4,245
  5. Conrad Weiler

    archival test - Epson 10000 printer

    Conrad Weiler, Jul 31, 2003, in forum: Digital Photography
    Replies:
    0
    Views:
    388
    Conrad Weiler
    Jul 31, 2003
Loading...

Share This Page