[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] attackalert UDP port: 67 question



I have been getting the following in my logs for the last 19hrs:

Apr  3 13:16:41 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr  3 13:16:41 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring
Apr  3 13:16:46 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr  3 13:16:46 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring
Apr  3 13:16:54 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr  3 13:16:54 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring

The same lines are now repeated thousands of times.

When I contacted the owners of the server at 194.88.88.5 they informed me
that it is a windows nt server and they have no idea what is going on.

According to a document on the web udp port 67 is bootps - Bootstrap
Protocol Server.

Any ideas what I should do?

Thanks

Mark Roebuck