|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: huge scans from www.oix.com
From: jose (jose
EINTEC.ES)Date: Fri Apr 28 2000 - 03:19:03 CDT
- Next message: Ville: "Re: I am popular today..."
- Previous message: Cho Yongsang: "regulary 137 and 524 port scan"
- Next in thread: Robert D. Elliott: "Re: huge scans from www.oix.com"
- Reply: Robert D. Elliott: "Re: huge scans from www.oix.com"
- Reply: Richard Bejtlich: "Re: huge scans from www.oix.com"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This morning i see in the system logs a huge of this messages
xxx.xxx.37.3:21 L=40 S=0x00 I=64651 F=0x4000 T=46
Apr 28 07:43:18 neptuno kernel: Packet log: input REJECT eth0 PROTO=6
205.189.131.3:23851
xxx.xxx.37.3:53 L=40 S=0x00 I=64652 F=0x0000 T=46
Apr 28 07:43:18 neptuno kernel: Packet log: input REJECT eth0 PROTO=6
205.189.131.3:24051
xxx.xxx.37.3:110 L=40 S=0x00 I=64653 F=0x0000 T=46
Apr 28 07:43:18 neptuno kernel: Packet log: input REJECT eth0 PROTO=6
205.189.131.3:26217
xxx.xx.37.3:143 L=40 S=0x00 I=64654 F=0x0000 T=46
Apr 28 07:43:18 neptuno kernel: Packet log: input REJECT eth0 PROTO=6
205.189.131.3:26578
xxx.xxx.37.3:635 L=40 S=0x00 I=64655 F=0x0000 T=46
this ip also scanned my primary nameserver too
what is the port 635?
- Next message: Ville: "Re: I am popular today..."
- Previous message: Cho Yongsang: "regulary 137 and 524 port scan"
- Next in thread: Robert D. Elliott: "Re: huge scans from www.oix.com"
- Reply: Robert D. Elliott: "Re: huge scans from www.oix.com"
- Reply: Richard Bejtlich: "Re: huge scans from www.oix.com"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]