Strange connection attempts

From: Andrea Efstathiou (aefstathiouat_private)
Date: Fri Aug 03 2001 - 09:26:44 PDT

  • Next message: Michael Hendricks: ""prepare to be owned"" 

    Hi all,

Just seen this in my logs and was wondering if anyone else is getting these same connection attempts.

Aug  2 23:49:01 my.domain.com 20537: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> my.ip.address(22), 1 packet
Aug  2 23:49:11 my.domain.com 20538: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> my.ip.address(25), 1 packet
Aug  2 23:49:16 my.domain.com 20539: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> my.ip.address(53), 1 packet
Aug  2 23:49:21 my.domain.com 20540: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> my.ip.address(123), 1
packet
Aug  2 23:53:30 my.domain.com 20546: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> my.ip.address(22), 1
packet
Aug  2 23:53:40 my.domain.com 20547: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> my.ip.address(25), 1
packet
Aug  2 23:53:45 my.domain.com 20548: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> my.ip.address(53), 1
packet
Aug  2 23:53:50 my.domain.com 20549: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> my.ip.address(123), 1
packet
Aug  2 23:54:56 my.domain.com 20554: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> my.ip.address(22), 1 packet
Aug  2 23:58:56 my.domain.com 20563: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> my.ip.address(22), 1
packet

Regards,

Andrea Efstathiou




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Fri Aug 03 2001 - 15:12:03 PDT