Security Incidents mailing list archives

Re: Linuxconf scanning

From: Frank Dauer <fdauer () ESESIX COM>
Date: Wed, 9 Aug 2000 09:39:47 +0200

Hi!

did anyone else see this over the weekend?


Yes, we also had a scan over our whole subnet.

[...]
Aug  4 12:10:32 kerberos kernel: Packet log: eth1-in REJECT eth1 PROTO=6
211.36.109.130:2386 62.153.78.84:98 L=60 S=0x00 I=32461 F=0x4000 T=43 SYN
(#46)
Aug  4 12:10:32 kerberos kernel: Packet log: eth1-in REJECT eth1 PROTO=6
211.36.109.130:2395 62.153.78.85:98 L=60 S=0x00 I=32462 F=0x4000 T=43 SYN
(#46)
[...]

The time mentioned is CEST.

--
Bye,
  Frank

Current thread:

Linuxconf scanning Ian Eure (Aug 08)
- Re: Linuxconf scanning jeff keith (Aug 09)
- Re: Linuxconf scanning James Hoagland (Aug 09)
  - Re: Linuxconf scanning Dan Hollis (Aug 10)
- <Possible follow-ups>
- Re: Linuxconf scanning Frank Dauer (Aug 09)
- Re: Linuxconf scanning Brian Sommers (Aug 13)
  - Re: Linuxconf scanning Jim Roland (Aug 14)
    - Re: Linuxconf scanning Granquist, Lamont (Aug 22)
- Re: Linuxconf scanning Granquist, Lamont (Aug 24)
  - Re: Linuxconf scanning Jon Lewis (Aug 24)
- Re: Linuxconf scanning St. Arnaud, Jon (Aug 25)