Security Incidents mailing list archives

Re: Not pulling the plug


From: admin () DNSPPP NET (Niles Mills)
Date: Fri, 18 Feb 2000 19:45:24 -0500


I saw this too

Feb 16 17:32:04 oi ippl: port 5 connection attempt from ns.rbscc.com
[12.3.24.2]

portsentry blocked the host very quickly...  works for me.
as to port 5... ???

Ditto:

950419936 - 02/13/2000 00:32:16 Host: ns.rbscc.com/12.3.24.2 Port: 5 TCP Blocked

I spoke with rbscc.com's admin at that time and he said "we can't fix the
system or take it offline, because there's too much production software running
on it.".  Also, he beat me to the punch and said "let me guess, we scanned
you on port 5".  Apparently I wasn't the first person who had called up to
complain.

Niles Mills
admin () dnsppp net


Current thread: