Great Circle Associates Firewalls
(February 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Scanning from afar...
From: Shawn Steele <shawn @ aob . org>
Date: Fri, 2 Feb 1996 15:04:47 -0700
To: Firewalls @ greatcircle . com
In-reply-to: firewalls-digest-owner @ greatcircle . com "Firewalls-Digest V5 #78" (Feb 1, 2:00pm)
References: <199602012200 . OAA02128 @ miles . greatcircle . com>

> Has anyone seen this type of network scanning before?  Addresses have
> been changed to protect the inocent and the guilty.
> 
> Jan 30 11:14:41.922: %SEC-6-IPACCESSLOGP: list 111 denied tcp
> X.X.143.14(39620) -> X.X.211.227(80), 1 packet

Maybe its a webbot gone mad that wants to index the web REALLY
thoroughly.  I wonder why they're only checking every 16th machine?

- shawn

Shawn Steele
Webmaster
Information Systems Administrator
Association of Brewers            (303) 447-0816 x 118   (voice)
736 Pearl Street                  (303) 447-2825         (fax)
PO Box 1679                       shawn @
 aob .
 org          (e-mail)
Boulder, CO  80306-1679           info @
 aob .
 org           (aob info)
U.S.A.                            http://www.aob.org/aob (web)

Note:  When replying to my messages, please include enough of my
message so that I know what you're replying to! :-)

Indexed By Date Previous: Survey
From: "Dan Vukelich" <Dan_Vukelich @ qmgateib . mitre . org>
Next: Re: Does SMTP allow security breaches.
From: Brent @ GreatCircle . COM (Brent Chapman)
Indexed By Thread Previous: Re: Scanning from afar...
From: bret @ real . com (Bret McDanel)
Next: Windows 95 clobbering firewall?
From: Sick Puppy <sikpuppy @ maestro . com>

Google
 
Search Internet Search www.greatcircle.com