[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Under attack
- Subject: [cobalt-users] Under attack
- From: "Chris Mason" <chris@xxxxxx>
- Date: Sun Feb 18 07:49:11 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Portsentry sent me this message today, do you think it was a real attack? I
email it to the ISP asking them to investigate..
Chris
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host 24.200.112.78 has
been blocked via wrappers with string: "ALL: 24.200.112.78"
Feb 18 09:47:35 www portsentry[973]: attackalert: Host 24.200.112.78 has
been blocked via dropped route using command: "/sbin/ipchains -I input -s
24.200.112.78 -j DENY -l"
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring
Feb 18 09:47:35 www portsentry[973]: attackalert: Connect from host:
modemcable078.112-200-24.mtl.mc.videotron.ca/24.200.112.78 to TCP port: 1080
Feb 18 09:47:35 www portsentry[973]: attackalert: Host: 24.200.112.78 is
already blocked. Ignoring