Re: continues SCAN Proxy attempt

From: Christian Vogel (chrisat_private)
Date: Fri May 24 2002 - 13:47:02 PDT

Next message: Andreas Wiesmann: "strange .ch scan by 195.141.86.145"

Previous message: Bamm (Robert) Visscher: "Re: odd scans?"
In reply to: Hugo van der Kooij: "continues SCAN Proxy attempt"
Next in thread: Russell Fulton: "Re: continues SCAN Proxy attempt"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

> May 24 22:08:04 vigor kernel: Packet log: if-inet DENY ppp0 PROTO=6 
> 209.134.35.55:3904 213.84.18.35:1080 L=48 S=0x00 I=11804 F=0x4000 T=106 
> SYN (#36)  

> I have yet not received any response from the owner of the netblock.
Probably just a spammer looking for open relays, this ip-address is
in spews: http://www.spews.org/html/S592.html

  ... 209.134.35.0/24, porn spam (webcountry.net) ...

Have a nice weekend,
  Chris

-- 
Smith & Wesson: The original point-and-click interface

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Andreas Wiesmann: "strange .ch scan by 195.141.86.145"
Previous message: Bamm (Robert) Visscher: "Re: odd scans?"
In reply to: Hugo van der Kooij: "continues SCAN Proxy attempt"
Next in thread: Russell Fulton: "Re: continues SCAN Proxy attempt"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri May 24 2002 - 14:18:19 PDT