[Techtalk] weird firewall log

[Rudy Zijlstra]

On Tue, 2009-04-07 at 17:48 -0700, Maria McKinley wrote:
> Daniel Pittman wrote:
> > Maria McKinley <maria at shadlen.org> writes:
> > 

> > As to why they are trying to connect: brute force password guessing
> > attacks. :)
> > 
> > Regards,
> >         Daniel
> 
> It is a one to one conversion. They are actually trying to reach 
> 128.208.108.109 (only the first number is changed). The computers really 
>   have picked that particular ip, it's not my nat rule redirecting in 
> some strange way. I just don't get why I don't see anything for any 
> other addresses. And why people smart enough to code a brute force 
> password attack wouldn't have it give up if it had absolutely no 
> response from that ip. ;-)


because they are simply running a script.. script kiddies. 
-- 
Cheers,


Rudy