SV: bizzare NULL scan

From: Mike Blomgren (mike.blomgrenat_private)
Date: Thu May 03 2001 - 01:24:10 PDT

Next message: Franky: "DNS servers!!"

Previous message: Patrick Cheong Shu Yang: "Re: Backdoor Q access?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

If the src ip is from a dialin ISP (whois in Portuguese is not my cup of
tea...;o), this could be related to a problem with Nortel CVX boxes, used by
the ISP. The symptoms are similiar.

> Can anyone explain what the following scan was trying to do?
> I don't understand
> the from port 0 ->
> port 0 stuff, or indeed the payload.  I'd think it was a
> mis-configured
> bit of kit, but that netblock
> is in Brazil....

Next message: Franky: "DNS servers!!"
Previous message: Patrick Cheong Shu Yang: "Re: Backdoor Q access?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 03 2001 - 14:11:43 PDT