From owner-freebsd-security Wed Jul 8 12:15:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA13682 for freebsd-security-outgoing; Wed, 8 Jul 1998 12:15:11 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from kaori.communique.net (kaori.communique.net [204.27.67.55]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA13675 for ; Wed, 8 Jul 1998 12:15:09 -0700 (PDT) (envelope-from rzig@verio.net) Received: by kaori.INTERNAL with Internet Mail Service (5.0.1458.49) id ; Wed, 8 Jul 1998 14:14:25 -0500 Message-ID: From: Raul Zighelboim To: "'Archie Cobbs'" , freebsd-security@FreeBSD.ORG Subject: RE: www security check output (fwd) Date: Wed, 8 Jul 1998 14:14:23 -0500 X-Priority: 3 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.0.1458.49) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org 2 simultaneous traceroute routines ? > -----Original Message----- > From: Archie Cobbs [SMTP:archie@whistle.com] > Sent: Wednesday, July 08, 1998 12:32 PM > To: freebsd-security@FreeBSD.ORG > Subject: www security check output (fwd) > > Does anyone recognize this attack? (I've changed the recipient IP > address to "IPADDRESS" to protect the innocent :-) > > Thanks, > -Archie > > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33468 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33468 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33469 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33469 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33470 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33470 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33471 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33471 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33472 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33472 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33473 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33473 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33474 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33474 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33475 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33475 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33476 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33476 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33477 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33477 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33478 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33478 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33479 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33479 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33480 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33480 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33481 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33481 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33482 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33482 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33483 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33483 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33484 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33484 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33485 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33485 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33486 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33486 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33487 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33487 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33488 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33488 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33489 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33489 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33490 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33490 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33491 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33491 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33492 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33492 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33493 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33493 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33494 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33494 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33495 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33495 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33496 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33496 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33497 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33497 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33498 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33498 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33499 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33499 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33500 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33500 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33501 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33501 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33502 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33502 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33503 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33503 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33504 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63110 IPADDRESS:33504 in via ed1 > > ipfw: 999 Deny UDP 207.239.226.169:63106 IPADDRESS:33505 in via ed1 > > ipfw: limit reached on rule #999 > > ______________________________________________________________________ > _____ > Archie Cobbs * Whistle Communications, Inc. * > http://www.whistle.com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message