[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] attackalert UDP port: 67 question
- Subject: [cobalt-users] attackalert UDP port: 67 question
- From: Mark Roebuck <mroebuck@xxxxxxxxxxxxxxxxxxx>
- Date: Mon Apr 2 22:03:49 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
I have been getting the following in my logs for the last 19hrs:
Apr 3 13:16:41 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr 3 13:16:41 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring
Apr 3 13:16:46 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr 3 13:16:46 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring
Apr 3 13:16:54 www portsentry[796]: attackalert: Connect from host:
194.88.88.5/194.88.88.5 to UDP port: 67
Apr 3 13:16:54 www portsentry[796]: attackalert: Host: 194.88.88.5 is
already blocked. Ignoring
The same lines are now repeated thousands of times.
When I contacted the owners of the server at 194.88.88.5 they informed me
that it is a windows nt server and they have no idea what is going on.
According to a document on the web udp port 67 is bootps - Bootstrap
Protocol Server.
Any ideas what I should do?
Thanks
Mark Roebuck