Firewall Log Entries Help

Hi!

I'm using a Windows 2003 Server with the follow services and ports:
- WebServer, port 80 TCP;
- DNS, port 53 UDP;
- SMTP, port 25 TCP;
- POP3, port 110 TCP;
- Port 53 TCP.

This machine is connected directly with internet and the only firewall is
the Windows with the ports above open to Internet.

The entries in the firewall log that begin are listed below. In the big part
are attempt connections to ports TCP 139, TCP 445, TCP 135, TCP 307, TCP
309...


This attempt connections signify some thing?
My ethernet card have stop to responds to internet connections since this
firewall log entries begin. This attempt connections can have anything
related with this?

Action-Protocol-Source IP-Destination IP-Source Port-Dest Port
DROP UDP 204.16.208.117 200.162.106.93 40736 1027 308 - - - - - - - RECEIVE
DROP TCP 200.162.57.54 200.162.106.92 3506 445 48 S 1493774078 0 64240 - - -
RECEIVE
DROP TCP 200.162.57.54 200.162.106.92 3506 445 48 S 1493774078 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.90 1134 139 48 S 325869944 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.90 1134 139 48 S 325869944 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.90 4714 139 48 S 639651352 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.90 4714 139 48 S 639651352 0 64240 - - -
RECEIVE
DROP TCP 200.151.103.154 200.162.106.90 4691 135 48 S 2710708069 0
8760 - - - RECEIVE
DROP TCP 200.151.103.154 200.162.106.91 4692 135 48 S 2710758501 0
8760 - - - RECEIVE
DROP TCP 200.151.103.154 200.162.106.92 4693 135 48 S 2710816989 0
8760 - - - RECEIVE
DROP TCP 200.151.103.154 200.162.106.93 4694 135 48 S 2710870218 0
8760 - - - RECEIVE
DROP TCP 200.162.57.54 200.162.106.93 4497 445 48 S 3200304490 0 64240 - - -
RECEIVE
DROP TCP 200.162.57.54 200.162.106.93 4497 445 48 S 3200304490 0 64240 - - -
RECEIVE
DROP TCP 200.104.230.90 200.162.106.93 4612 445 48 S 1385113433 0
16384 - - - RECEIVE
DROP TCP 200.104.230.90 200.162.106.93 4612 445 48 S 1385113433 0
16384 - - - RECEIVE
DROP TCP 200.162.57.54 200.162.106.90 4172 445 48 S 4153052349 0 64240 - - -
RECEIVE
DROP TCP 200.162.57.54 200.162.106.90 4172 445 48 S 4153052349 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.93 2344 135 48 S 1627564286 0 64240 - - -
RECEIVE
DROP TCP 200.162.50.5 200.162.106.93 2344 135 48 S 1627564286 0 64240 - - -
RECEIVE
DROP TCP 124.8.2.150 200.162.106.90 4593 8080 48 S 1507230536 0 16384 - - -
RECEIVE
DROP TCP 124.8.2.150 200.162.106.93 4639 8080 48 S 2992589925 0 16384 - - -
RECEIVE
DROP TCP 124.8.2.150 200.162.106.91 4637 8080 48 S 3210896353 0 16384 - - -
RECEIVE
DROP TCP 124.8.2.150 200.162.106.92 4638 8080 48 S 2639401880 0 16384 - - -
RECEIVE

Thanks for any help,
Andrew


.

Relevant Pages

  • Re: Looking for program that emails me when dhcp addr changes
    ... For SSH all you need forwarded is TCP Port 22... ... >>participate in TCP connections or UDP conversations it initiates but ...
    (comp.security.ssh)
  • Re: excessive TCP dulplicate acks revisted
    ... The tcp duplicate ACK attack is back. ... there was a thread on duplicate TCP acks in -CURRENT. ... TCP STREAM TEST from localhost port 0 AF_INET to greenhouse- george.18clay.com port 0 AF_INET ... Socket Socket Message Elapsed ...
    (freebsd-current)
  • excessive TCP dulplicate acks revisted
    ... The tcp duplicate ACK attack is back. ... there was a thread on duplicate TCP acks in -CURRENT. ... TCP STREAM TEST from localhost port 0 AF_INET to greenhouse- george.18clay.com port 0 AF_INET ... Socket Socket Message Elapsed ...
    (freebsd-current)
  • RE: http-NO (mail,news,messenging..)-yes
    ... The Unknown P wrote: ... Fast connections do not equal fast throughput. ... I have the pc in my workshop, and No http port 80, but I ... I tried IE, Firefox, as well as the windows help system, no luck. ...
    (microsoft.public.windowsxp.general)
  • Re: Windows 2000 - MS Access XP and Sql Server 2005.
    ... The library is the library for the named pipes protocol; ... adding tcp: before the name of the server. ... the right port to use) at the end. ... I can't connect a client computer with windows 2000 to sql server 2005: ...
    (microsoft.public.access.adp.sqlserver)
Loading