Security Incidents mailing list archives
scanned - strange!
From: sir_scriptzalot () HOTMAIL COM (Sir Scriptzalot)
Date: Wed, 21 Jun 2000 09:58:18 EST
Check this out. It all seems weird.
Does anyone know what's happening here?
Host 10.3.2.15 (our host) crashed for inexplicable
reasons at about the same time the patterns below
ceased.
Regards,
Max
Max Steel
Omega-Xpress
time=epoch time
shost=source/remote host/ip - ISP
lhost=localhost - host on our network
sport=source *from* port
lport=port on local machine on our network
time shost lhost sport lport bytes
transferred
961464997 212.216.176.40 10.3.2.15 25 2503 48
961464997 212.216.176.75 10.3.2.15 25 2505 48
961465005 212.216.176.50 10.3.2.15 25 2479 48
961465005 212.216.176.51 10.3.2.15 25 2538 272
961465009 212.216.176.75 10.3.2.15 25 2528 48
961465018 212.216.176.40 10.3.2.15 25 2491 48
961465019 212.216.176.76 10.3.2.15 25 2492 48
961465021 212.216.176.41 10.3.2.15 25 2494 48
961465029 212.216.176.32 10.3.2.15 25 2549 416
961465029 212.216.176.51 10.3.2.15 25 2538 48
961465036 212.216.176.44 10.3.2.15 25 2499 48
961465040 212.216.176.77 10.3.2.15 25 2550 320
961465047 212.216.176.40 10.3.2.15 25 2503 48
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
Current thread:
- Which DoS ? [Updated] Eric LeBlanc (Jun 15)
- Re: Which DoS ? [Updated] Patrick Oonk (Jun 16)
- Re: Which DoS ? [Updated] Pluto (Jun 20)
- Re: Which DoS ? [Updated] Ian Eure (Jun 21)
- Netbus portscan ( port 12345) lmonin () METACONCEPT COM (Jun 21)
- Re: Netbus portscan ( port 12345) James T. Perry (Jun 22)
- scanned - strange! Sir Scriptzalot (Jun 21)
- (forw) Jennifer Granick Audio Interview now online Elias Levy (Jun 21)
- Connections to port 635 ?? Gunther Stammwitz (Jun 21)
- Connections to port 635 ?? Klaus Moeller (Jun 23)
- Re: Connections to port 635 ?? Bill (Jun 23)
- stranger ftp kill Max Gribov (Jun 23)
- Re: stranger ftp kill frank () STUDENT2 RUG AC BE (Jun 23)
- Re: stranger ftp kill jose (Jun 26)
- Re: Connections to port 635 ?? Ben Laws (Jun 23)
- Re: Connections to port 635 ?? Robert Graham (Jun 23)
- Nike Site taken over F_SecurityList Jo (Jun 21)
