loopback address entries on router logs...

[Murad Talukdar <talukdar_m () subway com>]

Hi,
I've suddenly started to get entries in my firewall logs for a loopback
address. Destination is various ports. Anyone got any ideas as to what this
is? Or how to find out where it's coming from?
It's happening a few times a day now.
Thanks:
Sun, 06/20/2004 15:00:16 - TCP connection dropped - Source:127.0.0.1, 80,
WAN - Destination:210.x.x.x, 1794, LAN - 'Suspicious TCP Data'
Sun, 06/20/2004 16:17:54 - TCP connection dropped - Source:127.0.0.1, 80,
WAN - Destination:210.x.x.x, 1322, LAN - 'Suspicious TCP Data'
Sun, 06/20/2004 18:16:38 - TCP connection dropped - Source:127.0.0.1, 80,
WAN - Destination:210.x.x.x, 1536, LAN - 'Suspicious TCP Data'




Murad Talukdar
Murad Talukdar




---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------