Hosting Provided By

Re: New mail scanner?

From: Jeff Kell <jeff-kell(at)utc.edu>
Date: Sun Aug 10 2003 - 22:57:05 EDT

As of this weekend, receiving these scans from:

171.75.244.157
171.75.198.30
67.64.156.215

They still continue, one every couple of minutes. source port always zero, destination within our netblock but not in any particular order.

The attacks appear random (most are attacking addresses in our NAT pool, many of which have no associated translation at the moment), but they are fairly uniformly distributed across our /18.

Jeff

Received on Mon Aug 11 05:02:32 2003

This message: [ Message body ]
Next message: James C. Slora Jr.: "Re: New mail scanner?"
Previous message: Justin Pryzby: "Re: Heads up! distributed scans and attacks targeting nsiss.dll"
Maybe in reply to: Jeff Kell: "New mail scanner?"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:16 EDT