Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip)

From: Steven Dietz <stevenpdietz(at)hotmail.com>
Date: Fri Jan 31 2003 - 14:43:46 EST

I've been seeing the same thing. 255.255.255.255 scanning random IPs. Working to have it blocked now.

Intrusion detection analyst

>From: "Peter Triller" <ptriller@xebec.de>
>To: <incidents@securityfocus.com>
>Subject: Re: Packets from 255.255.255.255(80) (was: Packet from port 80
>with spoofed microsoft.com ip)
>Date: Fri, 31 Jan 2003 03:01:49 +0100
>
> >I am seeing a lot of sync/ack packets from port 80 to non-existent

---

Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Sun Feb 2 11:51:29 2003