Security Incidents mailing list archives

Slow SNMP scan...


From: Jay Quinby <jquinby () employease com>
Date: Fri, 15 Feb 2002 18:13:42 -0500 (EST)

I'm seeing the same pattern:

#------------------------------------------------------------------------------#
Feb 14 10:30:03, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161
Feb 14 10:44:42, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161
Feb 14 19:24:40, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161
Feb 14 19:39:28, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161

193.64.58.53 =     ncc.fullcarecenter.com


(I've a script which parses Cisco router denial logs into output
that's a little more readable. Host IPs are sanitized for my comfort)

We're in the US; times are EST (UTC -5).

JQ

-----------------------------------------------------
James Quinby              |
Network Specialist (CCNA) |
Employease, Inc.          | http://www.employease.com
--- GPG:FAF432D93C44614AE21A3F049360F0E2115D01A -----

/usr/games/fortune:
The English have no respect for their language, and will not teach
their children to speak it.
                -- G. B. Shaw



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: