Security Incidents mailing list archives

Strange connection attempts


From: "Andrea Efstathiou" <aefstathiou () aeropia com>
Date: Fri, 3 Aug 2001 17:26:44 +0100

Hi all,

Just seen this in my logs and was wondering if anyone else is getting these same connection attempts.

Aug  2 23:49:01 my.domain.com 20537: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> 
my.ip.address(22), 1 packet
Aug  2 23:49:11 my.domain.com 20538: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> 
my.ip.address(25), 1 packet
Aug  2 23:49:16 my.domain.com 20539: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> 
my.ip.address(53), 1 packet
Aug  2 23:49:21 my.domain.com 20540: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> 
my.ip.address(123), 1
packet
Aug  2 23:53:30 my.domain.com 20546: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> 
my.ip.address(22), 1
packet
Aug  2 23:53:40 my.domain.com 20547: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> 
my.ip.address(25), 1
packet
Aug  2 23:53:45 my.domain.com 20548: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> 
my.ip.address(53), 1
packet
Aug  2 23:53:50 my.domain.com 20549: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> 
my.ip.address(123), 1
packet
Aug  2 23:54:56 my.domain.com 20554: %SEC-6-IPACCESSLOGP: list inbound denied tcp 64.15.202.142(1024) -> 
my.ip.address(22), 1 packet
Aug  2 23:58:56 my.domain.com 20563: %SEC-6-IPACCESSLOGP: list inbound denied tcp 204.71.128.148(1024) -> 
my.ip.address(22), 1
packet

Regards,

Andrea Efstathiou




----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: