At a guess, someone is running an automated attack
hitting port after port. It is also possible that
multiple people are doing this. The reason for the
interval involved is that some high end firewalls will
detect repeated attempts within a certain time frame and
block all further traffic from that address.
>-----Original Message-----
>For the last couple of days, have had the attached entry
>in base stattion log. As you can see, it repeats every
>few minutes, apparently 24 hours a day.
>A recent post indicates this is the firewall in base
>station doing its job, blocking unauthorized access
>attempts. But I find it hard to believe that such
>attempts would be nearly constant for several days.
>We have Comcast Pro - does this make any difference?
>Could it be the sasser worm? The perplexing thing is, I
>also have a MN-100 at home, and no entries like this in
>base station log there.
>
>2004/05/04 10:57:30 Connection attempt to base station
>from WAN blocked -- src:<24.17.179.147:3918>
>dst:<24.17.228.212:2745>
>2004/05/04 10:57:36 Connection attempt to base station
>from WAN blocked -- src:<24.17.179.147:3918>
>dst:<24.17.228.212:2745>
>2004/05/04 10:59:16 Connection attempt to base station
>from WAN blocked -- src:<218.254.154.82:3649>
>dst:<24.17.228.212:1027>
>2004/05/04 10:59:23 Connection attempt to base station
>from WAN blocked -- src:<219.250.116.20:1292>
>dst:<24.17.228.212:1026>
>2004/05/04 11:02:22 Connection attempt to base station
>from WAN blocked -- src:<24.164.43.30:11693>
>dst:<24.17.228.212:1027>
>
>.
>
|
Similar Threads
Linear Mode
