[Opensim-users] Anyone recognise versanet.de or 94.135.203.122

Luisillo Contepomi luisillo at contepomi.net
Sun Jan 11 13:41:12 UTC 2015


Hi
Seem as somebody are testing if your grid is "up" with a script.
(If was a attack must have thousands by second from one or a lot of ips.)
Have you seen if they are doing a port scanning?



El 11/01/2015 a las 11:53, Ai Austin escribió:
>
>> From: "Shaun T. Erickson" <ste at smxy.org>
>>
>> What kind of traffic is it? My Blamgates check their destinations once
>> an hour - perhaps they are doing something similar, but at a greater
>> frequency? Just a wild guess, though.
>
>
> Thanks Shauin, and yes from the port numbers begin used I expect it is 
> indeed some scripts to check for things benign alive or pinging 
> hypergates, etc.
>
> I wondered if anyone recognized the 191 second interval as well as the 
> IP address.
>
> Once an hour is not too bad.. and I see four or five such IP addresses 
> one of which might be your blam gate for us..  e.g. 65.78.40.167
>
> But every 191 seconds means my Robust.exe console is now full up with 
> these debug messages when I check things every so often... yes I know 
> I can turn that down to INFO only being shown..
>
> Samples below...  !!
>
> 08:55:32 - [Wifi]: DefaultRequest from 94.135.203.122:63188
> 08:57:53 - [Wifi]: DefaultRequest from 94.135.203.122:63260
> 09:00:17 - [Wifi]: DefaultRequest from 94.135.203.122:63341
> 09:02:32 - [Wifi]: DefaultRequest from 94.135.203.122:63429
> 09:04:43 - [Wifi]: DefaultRequest from 94.135.203.122:63498
> 09:07:03 - [Wifi]: DefaultRequest from 94.135.203.122:63589
> 09:09:15 - [Wifi]: DefaultRequest from 94.135.203.122:63653
> 09:11:35 - [Wifi]: DefaultRequest from 94.135.203.122:63730
> 09:13:56 - [Wifi]: DefaultRequest from 94.135.203.122:63806
> 09:16:17 - [Wifi]: DefaultRequest from 94.135.203.122:63876
> 09:18:38 - [Wifi]: DefaultRequest from 94.135.203.122:63948
> 09:20:59 - [Wifi]: DefaultRequest from 94.135.203.122:64017
> 09:23:20 - [Wifi]: DefaultRequest from 94.135.203.122:64092
> 09:25:41 - [Wifi]: DefaultRequest from 94.135.203.122:64167
> 09:28:02 - [Wifi]: DefaultRequest from 94.135.203.122:64240
> 09:30:23 - [Wifi]: DefaultRequest from 94.135.203.122:64310
> 09:32:45 - [Wifi]: DefaultRequest from 94.135.203.122:64383
> 09:35:05 - [Wifi]: DefaultRequest from 94.135.203.122:64454
> 09:37:26 - [Wifi]: DefaultRequest from 94.135.203.122:64532
> 09:37:45 - [Wifi]: DefaultRequest from 65.78.40.167:44492
> 09:39:47 - [Wifi]: DefaultRequest from 94.135.203.122:64617
> 09:41:58 - [Wifi]: DefaultRequest from 94.135.203.122:64688
> 09:44:18 - [Wifi]: DefaultRequest from 94.135.203.122:64759
> 09:46:31 - [Wifi]: DefaultRequest from 94.135.203.122:64824
> 09:48:51 - [Wifi]: DefaultRequest from 94.135.203.122:64897
> 09:51:02 - [Wifi]: DefaultRequest from 94.135.203.122:64964
> 09:53:22 - [Wifi]: DefaultRequest from 94.135.203.122:65056
> 09:55:33 - [Wifi]: DefaultRequest from 94.135.203.122:65125
> 09:57:54 - [Wifi]: DefaultRequest from 94.135.203.122:65198
> 10:00:15 - [Wifi]: DefaultRequest from 94.135.203.122:65266
> 10:02:36 - [Wifi]: DefaultRequest from 94.135.203.122:65339
> 10:04:58 - [Wifi]: DefaultRequest from 94.135.203.122:65412
> 10:07:38 - [Wifi]: DefaultRequest from 94.135.203.122:65515
> 10:10:20 - [Wifi]: DefaultRequest from 94.135.203.122:49217
> 10:13:01 - [Wifi]: DefaultRequest from 94.135.203.122:49299
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>



More information about the Opensim-users mailing list