Security Incidents mailing list archives
Re: NTP scan ????
From: Will Aoki <waoki () umnh utah edu>
Date: Tue, 26 Feb 2002 18:52:45 -0700
On Wed, Feb 27, 2002 at 10:43:19AM +1300, Russell Fulton wrote:
Just picked up a SYN scan for NTP. There were problems with xntp a while back, I wonder if there is now an exploit out there...
I saw a SYN scan for port 123 from serv000.vj.worldonline.dk (213.237.6.5) at 22:13 GMT-7 on the 20th, but I figured that it must be something other than NTP, since AFAIK NTP only runs over UDP. -- William Aoki waoki () umnh utah edu /"\ ASCII Ribbon Campaign 3B0A 6800 8A1A 78A7 9A26 BB92 \ / No HTML in mail or news! 9A26 BB92 6329 2D3E 199D 8C7B X / \ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- NTP scan ???? Russell Fulton (Feb 26)
- Re: NTP scan ???? Paul Gear (Feb 27)
- Re: NTP scan ???? Will Aoki (Feb 27)
- Re: NTP scan ???? Russell Fulton (Feb 27)
- Re: NTP scan ???? Paul Gear (Feb 28)
- Re: NTP scan ???? Russell Fulton (Feb 27)
- Re: NTP scan ???? John Kristoff (Feb 28)