[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
attack

To: tech@openbsd.org
Subject: attack
From: Peter Harmsen <netpython@concepts.nl>
Date: Sun, 13 Jun 2004 01:04:16 +0200
Hello,

Sry i write to this list but i don't know where else to go to.
The last for days i have this in my gateway log:seems like "they" are trying to connect to port 2678, goes on the whole day , day&night.
No. Time                  Source IP              Destination IP         Note                             
  1|01/04/2000 21:00:00  |82.228.128.29:4224    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  2|01/04/2000 20:59:59  |62.163.6.139:3735     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  3|01/04/2000 20:59:59  |24.19.143.9:3237      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  4|01/04/2000 20:59:59  |80.202.166.217:64884  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  5|01/04/2000 20:59:58  |200.215.9.227:4497    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  6|01/04/2000 20:59:58  |216.166.206.16:58841  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  7|01/04/2000 20:59:58  |200.114.248.243:4239  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  8|01/04/2000 20:59:57  |82.217.24.249:63639   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
  9|01/04/2000 20:59:56  |24.19.143.9:3237      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 10|01/04/2000 20:59:56  |84.98.32.62:4495      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 11|01/04/2000 20:59:56  |216.166.206.16:58841  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 12|01/04/2000 20:59:56  |80.202.166.217:64884  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 13|01/04/2000 20:59:56  |24.4.142.225:3771     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 14|01/04/2000 20:59:55  |81.207.90.206:1524    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 15|01/04/2000 20:59:54  |82.217.24.249:63639   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 16|01/04/2000 20:59:54  |82.228.128.29:4224    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 17|01/04/2000 20:59:53  |66.75.220.28:4566     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 18|01/04/2000 20:59:53  |24.4.142.225:3771     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 19|01/04/2000 20:59:52  |82.120.92.149:3287    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 20|01/04/2000 20:59:52  |200.215.9.227:4497    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 21|01/04/2000 20:59:51  |82.228.128.29:4224    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 22|01/04/2000 20:59:50  |81.101.202.245:4829   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 23|01/04/2000 20:59:50  |200.215.9.227:4497    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 24|01/04/2000 20:59:49  |81.207.90.206:1524    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 25|01/04/2000 20:59:49  |84.98.32.62:4495      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 26|01/04/2000 20:59:48  |62.163.6.139:3735     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 27|01/04/2000 20:59:47  |66.75.220.28:4566     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 28|01/04/2000 20:59:47  |84.98.32.62:4495      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 29|01/04/2000 20:59:46  |82.120.92.149:3287    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 30|01/04/2000 20:59:46  |81.207.90.206:1524    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 31|01/04/2000 20:59:45  |69.142.156.225:2091   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 32|01/04/2000 20:59:45  |66.75.220.28:4566     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 33|01/04/2000 20:59:44  |81.101.202.245:4829   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 34|01/04/2000 20:59:44  |82.120.92.149:3287    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 35|01/04/2000 20:59:43  |62.163.6.139:3735     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 36|01/04/2000 20:59:41  |81.101.202.245:4829   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 37|01/04/2000 20:59:39  |69.142.156.225:2091   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 38|01/04/2000 20:59:39  |213.51.69.139:3652    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 39|01/04/2000 20:59:39  |62.163.6.139:3735     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 40|01/04/2000 20:59:37  |80.7.184.89:2446      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 41|01/04/2000 20:59:36  |69.142.156.225:2091   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 42|01/04/2000 20:59:35  |80.200.42.25:1636     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 43|01/04/2000 20:59:33  |82.0.144.71:55351     |213.148.230.111:2369  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 44|01/04/2000 20:59:33  |213.51.69.139:3652    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 45|01/04/2000 20:59:31  |80.7.184.89:2446      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 46|01/04/2000 20:59:30  |212.7.5.50:4041       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 47|01/04/2000 20:59:30  |213.51.69.139:3652    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 48|01/04/2000 20:59:29  |80.200.42.25:1636     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 49|01/04/2000 20:59:27  |196.25.154.1:3315     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 50|01/04/2000 20:59:27  |82.0.144.71:55351     |213.148.230.111:2369  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 51|01/04/2000 20:59:27  |81.69.136.197:3275    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 52|01/04/2000 20:59:26  |80.200.42.25:1636     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 53|01/04/2000 20:59:25  |131.188.166.220:1186  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 54|01/04/2000 20:59:25  |80.57.67.133:1996     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 55|01/04/2000 20:59:24  |82.0.144.71:55351     |213.148.230.111:2369  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 56|01/04/2000 20:59:24  |212.7.5.50:4041       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 57|01/04/2000 20:59:23  |217.42.207.24:3515    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 58|01/04/2000 20:59:22  |131.188.166.220:1186  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 59|01/04/2000 20:59:22  |62.163.57.179:3936    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 60|01/04/2000 20:59:22  |81.82.164.134:1778    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 61|01/04/2000 20:59:21  |81.69.136.197:3275    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 62|01/04/2000 20:59:21  |80.41.189.235:3126    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 63|01/04/2000 20:59:21  |212.7.5.50:4041       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 64|01/04/2000 20:59:20  |129.240.143.226:1453  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 65|01/04/2000 20:59:19  |131.188.166.220:1186  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 66|01/04/2000 20:59:18  |4.33.46.71:2588       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 67|01/04/2000 20:59:18  |80.57.67.133:1996     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 68|01/04/2000 20:59:18  |81.69.136.197:3275    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 69|01/04/2000 20:59:17  |217.42.207.24:3515    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 70|01/04/2000 20:59:16  |62.163.57.179:3936    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 71|01/04/2000 20:59:16  |81.77.129.249:4523    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 72|01/04/2000 20:59:16  |206.74.179.65:4792    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 73|01/04/2000 20:59:16  |81.82.164.134:1778    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 74|01/04/2000 20:59:15  |80.41.189.235:3126    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 75|01/04/2000 20:59:14  |217.42.207.24:3515    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 76|01/04/2000 20:59:14  |84.64.43.170:3064     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 77|01/04/2000 20:59:13  |62.163.57.179:3936    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 78|01/04/2000 20:59:13  |81.82.164.134:1778    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 79|01/04/2000 20:59:12  |4.33.46.71:2588       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 80|01/04/2000 20:59:12  |69.156.164.147:62723  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 81|01/04/2000 20:59:12  |80.41.189.235:3126    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 82|01/04/2000 20:59:10  |69.156.164.147:62715  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 83|01/04/2000 20:59:10  |206.74.179.65:4792    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 84|01/04/2000 20:59:10  |81.77.129.249:4523    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 85|01/04/2000 20:59:09  |81.185.195.43:3266    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 86|01/04/2000 20:59:09  |4.33.46.71:2588       |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 87|01/04/2000 20:59:08  |84.64.43.170:3064     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 88|01/04/2000 20:59:07  |69.156.164.147:62715  |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 89|01/04/2000 20:59:07  |206.74.179.65:4792    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 90|01/04/2000 20:59:07  |81.77.129.249:4523    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 91|01/04/2000 20:59:05  |80.53.26.26:2110      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 92|01/04/2000 20:59:05  |84.64.43.170:3064     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 93|01/04/2000 20:59:03  |81.185.195.43:3266    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 94|01/04/2000 20:59:03  |196.25.154.1:3315     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 95|01/04/2000 20:59:01  |81.185.195.43:3266    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 96|01/04/2000 20:58:59  |80.53.26.26:2110      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 97|01/04/2000 20:58:59  |62.194.38.225:1847    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
 98|01/04/2000 20:58:58  |80.179.154.17:4053    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
 99|01/04/2000 20:58:58  |80.53.26.26:2110      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
100|01/04/2000 20:58:55  |80.43.101.61:1852     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
101|01/04/2000 20:58:54  |62.194.38.225:1847    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: UDP (W to L)
102|01/04/2000 20:58:54  |62.233.185.66:2261    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
103|01/04/2000 20:58:53  |196.25.154.1:3315     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
104|01/04/2000 20:58:52  |80.179.154.17:4053    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
105|01/04/2000 20:58:52  |68.162.53.142:65431   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
106|01/04/2000 20:58:49  |80.43.101.61:1852     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
107|01/04/2000 20:58:49  |80.179.154.17:4053    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
108|01/04/2000 20:58:48  |196.25.154.1:3315     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
109|01/04/2000 20:58:48  |62.233.185.66:2261    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
110|01/04/2000 20:58:46  |80.43.101.61:1852     |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
111|01/04/2000 20:58:46  |68.162.53.142:65431   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
112|01/04/2000 20:58:45  |62.233.185.66:2261    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
113|01/04/2000 20:58:45  |145.53.59.228:4419    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
114|01/04/2000 20:58:44  |80.178.82.202:4461    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
115|01/04/2000 20:58:43  |68.162.53.142:65431   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
116|01/04/2000 20:58:40  |82.217.211.122:4037   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
117|01/04/2000 20:58:39  |145.53.59.228:4419    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
118|01/04/2000 20:58:38  |83.152.151.24:2705    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
119|01/04/2000 20:58:38  |81.15.135.2:4353      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
120|01/04/2000 20:58:38  |80.178.82.202:4461    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
121|01/04/2000 20:58:37  |213.36.62.189:3717    |213.148.230.111:2369  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
122|01/04/2000 20:58:36  |145.53.59.228:4419    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
123|01/04/2000 20:58:35  |80.178.82.202:4461    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
124|01/04/2000 20:58:34  |82.217.211.122:4037   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
125|01/04/2000 20:58:33  |81.64.38.94:3847      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
126|01/04/2000 20:58:32  |83.152.151.24:2705    |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
127|01/04/2000 20:58:32  |81.15.135.2:4353      |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)
128|01/04/2000 20:58:31  |82.217.211.122:4037   |213.148.230.111:2678  |ACCESS BLOCK                    
    Firewall default policy: TCP (W to L)

End of Logs
Prev by Date: Re: More kernel testing on lots of machines urgenetly needed!
Next by Date: openbsd-tech@monkey.org -Available for you period
Prev by thread: Patch for broken ICH5 audio on 865PERL board
Next by thread: openbsd-tech@monkey.org -Available for you period
Index(es):
- Date
- Thread