OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ralf G. R. Bergs (rabeRWTH-AACHEN.DE)
Date: Tue Jan 23 2001 - 16:53:11 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi there,

    there's currently a distributed scan going on across our whole class C network
    (contained in the class B network 131.188.0.0/16.)

    The scanning machines send TCP packets with a source port of 23. The source IP
    addresses I've seen so far are

      134.53.215.184 (ip134-053-215-184.s215.muohio.edu)
      216.22.151.67 (fortress.omnicon.net)
      209.220.244.18 (w018.z209220244.chi-il.dsl.cnc.net)
      209.240.174.2 (apollo.netwest.com)

    Anyone else seen similar things going on?

    Ralf 

    --
Sign the EU petition against SPAM:          L I N U X       .~.
http://www.politik-digital.de/spam/        The  Choice      /V\
                                            of a  GNU      /( )\
                                           Generation      ^^-^^