[Techtalk] weird firewall log
Rudy Zijlstra
rudy at grumpydevil.homelinux.org
Wed Apr 8 01:10:47 UTC 2009
On Tue, 2009-04-07 at 17:48 -0700, Maria McKinley wrote:
> Daniel Pittman wrote:
> > Maria McKinley <maria at shadlen.org> writes:
> >
> > As to why they are trying to connect: brute force password guessing
> > attacks. :)
> >
> > Regards,
> > Daniel
>
> It is a one to one conversion. They are actually trying to reach
> 128.208.108.109 (only the first number is changed). The computers really
> have picked that particular ip, it's not my nat rule redirecting in
> some strange way. I just don't get why I don't see anything for any
> other addresses. And why people smart enough to code a brute force
> password attack wouldn't have it give up if it had absolutely no
> response from that ip. ;-)
because they are simply running a script.. script kiddies.
--
Cheers,
Rudy
More information about the Techtalk
mailing list