Re: Weird DNS scans

From: Seth Milder (mrsethat_private)
Date: Fri Oct 05 2001 - 18:33:37 PDT
Next message: Pavel Kankovsky: "port 22->port 22 scans"
Previous message: Valdis.Kletnieksat_private: "Re: new pop3 exploit out?"
In reply to: Richard Smith: "Re: Weird DNS scans"
Next in thread: John Hall: "Re: Weird DNS scans"
Reply: John Hall: "Re: Weird DNS scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Richard Smith wrote:

 > Can you post a sanitized dump of the scan? Are the
 > source ports incrementing by one and scanning port 53?
 > This is a common trait of BigIP it gathers RTT and
 > other stats so that it can properly route you to the
 > least loaded server via local load-balancing.
 >
 > The only concern I might have is the fact that IRC is
 > reported as listening on port 6667. It could be a
 > compromised host. BigIP uses a modified version of
 > FreeBSD. I don't remember it using this port, but I
 > could be wrong.
 >
 > R/
 >
 > Richard Smith
 >
 > _______



BTW, I could not telnet to port 6667 FWIW.

Here is some of it:



 > Oct  4 19:25:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:26983 x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=48 (#47)
Oct  4 19:25:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:26983 x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=48 (#47)
Oct  4 19:25:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:26983 x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=48 (#47)
Oct  4 19:25:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34409 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=47 (#47)
Oct  4 19:25:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34409 x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=47<6>Packet log: 
input  (#47)
Oct  4 19:25:41 physics kernel: DENY eth0 PROTO=17 202.96.96.3:34409 
x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=47<6>Packet log: input  (#47)
Oct  4 19:25:41 physics kernel: DENY eth0 PROTO=17 202.96.96.3:34409 
x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=47<6>Packet log: input  (#47)
Oct  4 19:25:41 physics kernel: DENY eth0 PROTO=17 202.96.96.3:34409 
x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=47 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63597 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=49 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63597 x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=49<6>Packet 
log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.136.61.67:63597 
x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.136.61.67:63597 
x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.136.61.67:63597 
x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45791 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=51<6>Packet 
log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.138.141.3:45791 
x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=51<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.138.141.3:45791 
x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=51 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45791 x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=51 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45791 x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=51 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51548 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=49<6>Packet 
log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.139.76.157:51548 
x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.139.76.157:51548 
x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.139.76.157:51548 
x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:42 physics kernel: DENY eth0 PROTO=17 61.139.76.157:51548 
x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30022 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=47 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30022 x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=47 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30022 x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=47 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30022 x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=47 (#47)
Oct  4 19:25:42 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30022 x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=47 (#47)
Oct  4 19:25:43 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36633 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=50 (#47)
Oct  4 19:25:43 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36633 x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=50 (#47)
Oct  4 19:25:43 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36633 x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=50 (#47)
Oct  4 19:25:43 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36633 x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=50 (#47)
Oct  4 19:25:43 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36633 x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=50 (#47)
Oct  4 19:25:45 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60534 x.x.x.x:53 L=72 S=0x00 I=1 F=0x0000 T=49 (#47)
Oct  4 19:25:45 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60534 x.x.x.x:53 L=72 S=0x00 I=4 F=0x0000 T=49<6>Packet 
log: input  (#47)
Oct  4 19:25:45 physics kernel: DENY eth0 PROTO=17 61.163.239.130:60534 
x.x.x.x:53 L=72 S=0x00 I=2 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:45 physics kernel: DENY eth0 PROTO=17 61.163.239.130:60534 
x.x.x.x:53 L=72 S=0x00 I=5 F=0x0000 T=49<6>Packet log: input  (#47)
Oct  4 19:25:45 physics kernel: DENY eth0 PROTO=17 61.163.239.130:60534 
x.x.x.x:53 L=72 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:26:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30045 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=47 (#47)
Oct  4 19:26:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30045 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=47 (#47)
Oct  4 19:26:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30045 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=47 (#47)
Oct  4 19:26:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30045 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=47 (#47)
Oct  4 19:26:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.180.7.130:30045 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=47 (#47)
Oct  4 19:26:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.101.43.222:16026 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=48 (#47)
Oct  4 19:26:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.101.43.222:16026 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=48 (#47)
Oct  4 19:26:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.101.43.222:16026 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=48 (#47)
Oct  4 19:26:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.101.43.222:16026 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=48 (#47)
Oct  4 19:26:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.101.43.222:16026 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=48 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60554 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60554 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60554 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60554 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.239.130:60554 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36743 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=50<6>Packet 
log: input  (#47)
Oct  4 19:26:06 physics kernel: DENY eth0 PROTO=17 61.163.241.2:36743 
x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=50<6>Packet log: input  (#47)
Oct  4 19:26:06 physics kernel: DENY eth0 PROTO=17 61.163.241.2:36743 
x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=50<6>Packet log: input  (#47)
Oct  4 19:26:06 physics kernel: DENY eth0 PROTO=17 61.163.241.2:36743 
x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=50 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.163.241.2:36743 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=50 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51571 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51571 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51571 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51571 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=49 (#47)
Oct  4 19:26:06 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.139.76.157:51571 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34440 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=47 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34440 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=47 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34440 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=47 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34440 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=47 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
202.96.96.3:34440 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=47 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63640 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63640 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63640 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63640 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.136.61.67:63640 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=49 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45822 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=51 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45822 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=51 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45822 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=51 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45822 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=51 (#47)
Oct  4 19:26:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.138.141.3:45822 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=51 (#47)
Oct  4 19:26:12 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:27014 x.x.x.x:53 L=45 S=0x00 I=1 F=0x0000 T=48 (#47)
Oct  4 19:26:12 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:27014 x.x.x.x:53 L=45 S=0x00 I=2 F=0x0000 T=48 (#47)
Oct  4 19:26:12 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:27014 x.x.x.x:53 L=45 S=0x00 I=3 F=0x0000 T=48 (#47)
Oct  4 19:26:12 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:27014 x.x.x.x:53 L=45 S=0x00 I=4 F=0x0000 T=48 (#47)
Oct  4 19:26:12 physics kernel: Packet log: input DENY eth0 PROTO=17 
61.134.9.133:27014 x.x.x.x:53 L=45 S=0x00 I=5 F=0x0000 T=48 (#47)


Oct  5 20:30:25 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:13150 x.x.x.x:53 L=72 S=0x00 I=11950 F=0x0000 T=53 (#47)
Oct  5 20:30:26 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:13150 x.x.x.x:53 L=72 S=0x00 I=11951 F=0x0000 T=53 (#47)
Oct  5 20:30:27 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:13150 x.x.x.x:53 L=72 S=0x00 I=11952 F=0x0000 T=53 (#47)
Oct  5 20:30:29 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:33310 x.x.x.x:53 L=72 S=0x00 I=41213 F=0x0000 T=53 (#47)
Oct  5 20:30:30 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:33310 x.x.x.x:53 L=72 S=0x00 I=41214 F=0x0000 T=53 (#47)
Oct  5 20:30:31 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:33310 x.x.x.x:53 L=72 S=0x00 I=41215 F=0x0000 T=53 (#47)
Oct  5 20:32:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:34913 x.x.x.x:53 L=72 S=0x00 I=54288 F=0x0000 T=53 (#47)
Oct  5 20:32:04 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:34913 x.x.x.x:53 L=72 S=0x00 I=54289 F=0x0000 T=53 (#47)
Oct  5 20:32:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:34913 x.x.x.x:53 L=72 S=0x00 I=54290 F=0x0000 T=53 (#47)
Oct  5 20:33:35 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:35268 x.x.x.x:53 L=72 S=0x00 I=55391 F=0x0000 T=53 (#47)
Oct  5 20:33:36 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:35268 x.x.x.x:53 L=72 S=0x00 I=55392 F=0x0000 T=53 (#47)
Oct  5 20:33:37 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:35268 x.x.x.x:53 L=72 S=0x00 I=55393 F=0x0000 T=53 (#47)
Oct  5 20:36:39 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:15234 x.x.x.x:53 L=45 S=0x00 I=18335 F=0x0000 T=53 (#47)
Oct  5 20:36:40 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:15234 x.x.x.x:53 L=45 S=0x00 I=18336 F=0x0000 T=53 (#47)
Oct  5 20:36:41 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.252:15234 x.x.x.x:53 L=45 S=0x00 I=18337 F=0x0000 T=53 (#47)
Oct  5 20:36:56 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:36182 x.x.x.x:53 L=72 S=0x00 I=58170 F=0x0000 T=53 (#47)
Oct  5 20:36:57 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:36182 x.x.x.x:53 L=72 S=0x00 I=58171 F=0x0000 T=53 (#47)
Oct  5 20:36:58 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:36182 x.x.x.x:53 L=72 S=0x00 I=58172 F=0x0000 T=53 (#47)
Oct  5 20:40:07 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37083 x.x.x.x:53 L=45 S=0x00 I=60916 F=0x0000 T=53 (#47)
Oct  5 20:40:08 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37083 x.x.x.x:53 L=45 S=0x00 I=60917 F=0x0000 T=53 (#47)
Oct  5 20:40:09 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37083 x.x.x.x:53 L=45 S=0x00 I=60918 F=0x0000 T=53 (#47)
Oct  5 20:42:13 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37692 x.x.x.x:53 L=45 S=0x00 I=62764 F=0x0000 T=53 (#47)
Oct  5 20:42:14 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37692 x.x.x.x:53 L=45 S=0x00 I=62765 F=0x0000 T=53 (#47)
Oct  5 20:42:15 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:37692 x.x.x.x:53 L=45 S=0x00 I=62766 F=0x0000 T=53 (#47)
Oct  5 20:44:45 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:38274 x.x.x.x:53 L=45 S=0x00 I=64536 F=0x0000 T=53 (#47)
Oct  5 20:44:46 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:38274 x.x.x.x:53 L=45 S=0x00 I=64537 F=0x0000 T=53 (#47)
Oct  5 20:44:47 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.253:38274 x.x.x.x:53 L=45 S=0x00 I=64538 F=0x0000 T=53 (#47)
Oct  5 20:52:03 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:35780 x.x.x.x:53 L=45 S=0x00 I=48619 F=0x0000 T=53 (#47)
Oct  5 20:52:04 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:35780 x.x.x.x:53 L=45 S=0x00 I=48620 F=0x0000 T=53 (#47)
Oct  5 20:52:05 physics kernel: Packet log: input DENY eth0 PROTO=17 
209.225.53.254:35780 x.x.x.x:53 L=45 S=0x00 I=48621 F=0x0000 T=53 (#47)


-- 
Seth Milder
Deptartment of Physics and Astronomy
MS 3f3
George Mason University
Fairfax, VA



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com
Next message: Pavel Kankovsky: "port 22->port 22 scans"
Previous message: Valdis.Kletnieksat_private: "Re: new pop3 exploit out?"
In reply to: Richard Smith: "Re: Weird DNS scans"
Next in thread: John Hall: "Re: Weird DNS scans"
Reply: John Hall: "Re: Weird DNS scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This archive was generated by hypermail 2b30 : Sat Oct 06 2001 - 11:26:20 PDT