top of page

Firewall log analysis

Week 1

Setting up the internet host

The first part was pretty straightforward. I didn't have any issues during the setup except for a message during the set up process

Screenshot 2024-09-13 at 6.38.48 PM.png

I chose the second option since I thought it would be easier to update it later if needed

I set up the internet host on Friday and let it run for 2 days. 

Screenshot 2024-09-16 at 12.27.33 PM.png

Around 7000 attempts to connect were blocked. I scrolled through the list a little and noticed one IP address multiple times and tried to look up how many times this specific IP address tried to connect

Screenshot 2024-09-16 at 12.36.15 PM.png
Screenshot 2024-09-16 at 1.34.38 PM.png

Lastly, I exported the last 200 connection attempts to a spreadsheet and spent some time looking for interesting connection attempts [link]

bottom of page