[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-pf
Subject:    OT New Virus blocked by firewall?
From:       Elijah Savage <esavage () digitalrage ! org>
Date:       2005-12-28 21:29:56
Message-ID: 43B303D4.70601 () digitalrage ! org
[Download RAW message or body]

Today I am seeing a ton of these request from two specific ip addresses 
that is being blocked by my firewall but I am not sure if it is some new 
virus or vulnerability. I know there is no reason for me to being 
recieving this traffic. I know this is NTP and possibly someone 
configured their ntp client incorrectly but I am recieving a ton of 
traffic for this just to be ntp poles.

Anyone else seeing anything.

Dec 28 15:13:44.492026 rule 0/(match) block in on le0: 66.96.30.91.123 >
X.X.X.X.23597:  v4 server strat 3 poll 0 prec -28
Dec 28 15:15:06.585773 rule 0/(match) block in on le0: 82.96.64.2.123 >
X.X.X.X.28934:  v4 server strat 1 poll 0 prec -19

 > > 82.96.64.2

Name:    bandit.probe-networks.de
Address:  82.96.64.2

 > > 66.96.30.91

Name:    ferret.eicat.ca
Address:  66.96.30.91
-- 
http://www.digitalrage.org/
The Information Technology News Center
[prev in list] [next in list] [prev in thread] [next in thread]