Firewall log analysis

Week 1

Setting up the internet host

The first part was pretty straightforward. I didn't have any issues during the setup except for a message during the set up process

I chose the second option since I thought it would be easier to update it later if needed

I set up the internet host on Friday and let it run for 2 days.

Screenshot 2024-09-16 at 12.27.33 PM.png

Around 7000 attempts to connect were blocked. I scrolled through the list a little and noticed one IP address multiple times and tried to look up how many times this specific IP address tried to connect

Screenshot 2024-09-16 at 12.36.15 PM.png

Lastly, I exported the last 200 connection attempts to a spreadsheet and spent some time looking for interesting connection attempts [link]