Security Incidents mailing list archives

Proxy Scans to dail up hosts...


From: "Grimes, Shawn (NIA/IRP)" <GrimesSh () grc nia nih gov>
Date: Fri, 30 Nov 2001 10:14:27 -0500

I notice in my snort logs that I have a box:
193.109.122.5 (proxyscan.undernet.org)

That is connecting to some of our dial-up hosts and performing FYN scans on
1080 & 8080 (proxies).  

Has anyone else seen similar activity?

Thank You,
Shawn Grimes
Computer Specialist
NCTS - Gerontology Research Center
410-558-8007
grimessh () grc nia nih gov 

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: