Security Incidents mailing list archives

Re: Anti-Death Penalty


From: tmolina () HOME COM (Thomas Molina)
Date: Thu, 27 Jan 2000 17:30:49 -0600


On Thu, 27 Jan 2000, Bill Royds wrote:

My BlackICEon an @home IP has detected 3 of those in last week.
Local online newsgroup reports many others seeing same thing.
Bandwidth stealing is one of the main problems with cable modems so this may
actually help customers security.

I looked back through my logs and found the activity began on 17 Jan.
I've noticed the same scanning for web and news servers (tcp ports 80
and 119).  These scans are happening about every ten to twelve hours
apart.  I've also noted scans for upd ports 68 and 2049 (??).  I raised
the issue with @HOME tech services who said they were looking for
servers and other activity which violated AUP.  What originally raised
my ire were literally hundreds of hits against udp port 2049.  On 19 Jan
these hits continued for a full two mintues!  That was the point at
which I complained; since then I haven't seen another such massive scan,
but the occasional searches for www and news servers continue unabated.


Current thread: