I'm seeing the same pattern: #------------------------------------------------------------------------------# Feb 14 10:30:03, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161 Feb 14 10:44:42, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161 Feb 14 19:24:40, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161 Feb 14 19:39:28, 193.64.58.53(2101) was denied udp to a.b.c.d, port 161 193.64.58.53 = ncc.fullcarecenter.com (I've a script which parses Cisco router denial logs into output that's a little more readable. Host IPs are sanitized for my comfort) We're in the US; times are EST (UTC -5). JQ ----------------------------------------------------- James Quinby | Network Specialist (CCNA) | Employease, Inc. | http://www.employease.com --- GPG:FAF432D93C44614AE21A3F049360F0E2115D01A ----- /usr/games/fortune: The English have no respect for their language, and will not teach their children to speak it. -- G. B. Shaw ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Fri Feb 15 2002 - 15:29:05 PST