Security Incidents mailing list archives
Are they back? (was Re: Scans from proxyprotector.com)
From: "Erik V. Olson" <eriko () mvp net>
Date: Sun, 25 May 2003 22:45:49 -0500
On Tuesday 20 May 2003 12:58 pm, Compton, Rich wrote:
Just sent a complaint and here's what I got: Your email for Abuse () race com has been received. Please allow us 72 hours for an emailed response. ** PLEASE NOTE If you are emailing about 64.201.104.2 this customer has been terminated.
And now, I'm seeing this in the snort summaries.... 1 65.106.233.2 SCAN Proxy (8080) attempt 1 65.106.233.2 SCAN SOCKS Proxy attempt 1 65.106.233.2 SCAN Squid Proxy attempt Two days in a row -- same pattern, same scans, from the same IP. Resolves to 65.106.233.2.ptr.us.xo.net, so they're keeping quiet (or running the scans from the home dsl line....) Mail to abuse () xo net on the way. -- Erik V. Olson : eriko () mvp net : http://walden.mvp.net/~eriko ---------------------------------------------------------------------------- *** Wireless LAN Policies for Security & Management - NEW White Paper *** Just like wired networks, wireless LANs require network security policies that are enforced to protect WLANs from known vulnerabilities and threats. Learn to design, implement and enforce WLAN security policies to lockdown enterprise WLANs. To get your FREE white paper visit us at: http://www.securityfocus.com/AirDefense-incidents ----------------------------------------------------------------------------
Current thread:
- Re: Scans from proxyprotector.com, (continued)
- Re: Scans from proxyprotector.com Charles Blackburn (May 17)
- Re: Scans from proxyprotector.com Charles Blackburn (May 19)
- Re: Scans from proxyprotector.com Danny (May 20)
- Re: Scans from proxyprotector.com Charles Blackburn (May 20)
- Re: Scans from proxyprotector.com Kurt Seifried (May 20)
- Re: Scans from proxyprotector.com Danny (May 20)
- RE: Scans from proxyprotector.com King, Brian (May 20)
- RE: Scans from proxyprotector.com Matthew F. Caldwell (May 20)
- RE: Scans from proxyprotector.com Compton, Rich (May 20)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Erik Fichtner (May 22)
- Are they back? (was Re: Scans from proxyprotector.com) Erik V. Olson (May 26)
- RE: Are they back? (was Re: Scans from proxyprotector.com) Mark Ng (May 27)
- RE: Are they back? (was Re: Scans from proxyprotector.com) jlewis (May 28)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Justin Pryzby (May 22)
- Re: Scans from proxyprotector.com Valdis . Kletnieks (May 22)
- RE: Scans from proxyprotector.com Mark Ng (May 27)
- RE: Scans from proxyprotector.com Rob Shein (May 27)
- Re: Scans from proxyprotector.com Kurt Seifried (May 27)