TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF7, ack 0x0, win 8192, SYN
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF8, ack 0x55D00446, win 8616, FIN ACK
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST
TCP from 205.200.13.34.1860 to 205.200.13.2.23 seq 241AEF9, ack 0x55D00446, win 0, RST
This sequence repeats every 60 seconds..
205.200.13.2 is my Radius/Web/Shell Account/Home-Dir server.. and 23 appears to be telnet. But this user is not logged in via telnet.
Les