OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Linuxconf scanning
From: Ian Eure (ieureSICKFUCK.ORG)
Date: Mon Aug 07 2000 - 13:09:10 CDT

saw some linuxconf scanning this weekend...

-- snip --
Aug 5 15:29:33 spindle kernel: Packet log: ltraf REJECT eth0 PROTO=6
211.169.82.130:4450 aaa.bbb.ccc.ddd:98 L=60 S=0x00 I=16301 F=0x4000 T=43
SYN (#11)
Aug 5 15:29:33 spindle kernel: Packet log: ltraf REJECT eth0 PROTO=6
211.169.82.130:4450 aaa.bbb.ccc.ddd:98 L=60 S=0x00 I=16301 F=0x4000 T=43
SYN (#11)
-- snip --
$ grep 98\/tcp /etc/services
linuxconf 98/tcp # LinuxConf
$

a quick whois shows the 210/8 & 211/8 subnets as delegated to the
asia-pacific region. queries to whois.apnic.net were butt-slow and didn't
respond.

did anyone else see this over the weekend? 

--
 ______________________________________________
| "the whole scale of cosmic dimensions are falling from my mouth
| in the description of a kiss of the interimlovers"
|   - einsturzende neubaten, "interim"