Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Security Incidents: Scans From 192.168.0.134

Scans From 192.168.0.134

From: Douglas P. Brown <Doug_at_UNC.EDU>
Date: Thu, 1 Feb 2001 10:29:57 -0500

We are somewhat preplexed - Our IDS reported 8000+ SYN FIN scans from a
non-routable address (192.168.0.134) to thousands of ours hosts
yesterday. Our IDS setup is only seeing traffic that traverses our main
router. Has anyone seen this before? Am I missing something? Any
advice or direction you can offer would be greatly appreciated.

Cheers,
-DpB 

--
Douglas P. Brown
University of North Carolina
I.T. Security Consultant
105 Abernethy Hall
Received on Feb 01 2001
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos