Re: IP 1.2.3.4

From: Bill Royds (Bill_Roydsat_private)
Date: Tue May 01 2001 - 11:12:18 PDT

Next message: Spookah .: "Strange Activity"

Previous message: Alfred Huger: "Vacation Troller, Please Ignore."
Next in thread: Hugo van der Kooij: "Re: IP 1.2.3.4"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Got the same thing this morning on my home cable modem.  will check packet
characteristics (other than source IP 1.2.3.4) to see if they correlate.




"Harlan S. Barney, Jr." <hsbarneyat_private> on 05/01/2001 11:33:46 AM

Please respond to "Harlan S. Barney, Jr." <hsbarneyat_private>



 To:      INCIDENTSat_private

 cc:      (bcc: Bill Royds/HullOttawa/PCH/CA)



 Subject: Re: IP 1.2.3.4






This scan got to the RoadRunner system in upstate NY today.

The following record is from BlackICE.  The date and time are GMT.

59, 2001-05-01 15:15:45, 2001501, Back Orifice scan seen, 1.2.3.4, ,
24.x.x.x, ,

type=RESOLVEHOST(22)&passwd_hash=0x7A69&length=53&xid=0x10C8BD23&iport=0x0400&vport=0x7A69,

1, A

Next message: Spookah .: "Strange Activity"
Previous message: Alfred Huger: "Vacation Troller, Please Ignore."
Next in thread: Hugo van der Kooij: "Re: IP 1.2.3.4"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 01 2001 - 17:35:12 PDT