Security Incidents mailing list archives

Re: Odd UPD scan

From: rw () ANOTHER DE (Rainer Weikusat)
Date: Fri, 17 Mar 2000 17:19:35 +0100


David Meissner <dmeissner () PUNCHNETWORKS COM> writes:

I've seen the same activity from source addresses like
10.2.2.1. Maybe they're trying to guess our internal network
numbers, but what would be the point?

Can anyone suggest what might be going on?


Nothing? Could simply be a misconfiguration at the other end. RFC1918
addresses show up quit regularly in the logs over here.

Rainer

--
- sig lost -

Current thread:

Odd UPD scan David Meissner (Mar 15)
- Re: Odd UPD scan Bill Pennington (Mar 16)
  - Re: Odd UPD scan Graeme Fowler (Mar 20)
- Re: Odd UPD scan Grzegorz Janoszka (Mar 17)
- <Possible follow-ups>
- Re: Odd UPD scan Randy Mclean (Mar 17)
- Re: Odd UPD scan Rainer Weikusat (Mar 17)
- Re: Odd UPD scan Bill Pennington (Mar 20)
  - Re: Odd UPD scan Pavel Kankovsky (Mar 21)
  - NetBIOS info Robert Graham (Mar 21)
    - Re: NetBIOS info Bill Pennington (Mar 22)
    - Strange probe Stuart Staniford-Chen (Mar 24)
    - Re: NetBIOS info Robert Graham (Mar 27)
    - Syn scans to 4045 Joey McAlerney (Mar 27)