[27702] in North American Network Operators' Group
Network Probes
daemon@ATHENA.MIT.EDU (Scott McGrath)
Thu Mar 9 15:53:12 2000
Message-ID: <38C80DF3.6194803E@bexair.com>
Date: Thu, 09 Mar 2000 15:47:47 -0500
From: "Scott McGrath" <s_mcgrath@bexair.com>
MIME-Version: 1.0
To: nanog@merit.edu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
Hi,
Has anyone else noticed probes against their network with a spoofed
source address
and Src (80) and Dst(2183)
---Snip.
Mar 8 17:40:16: %SEC-6-IPACCESSLOGP: list 110 denied tcp
216.52.56.50(80) (Ser
ial0 *PPP*) -> 216.64.1.198(2183), 1 packet
.Mar 8 17:44:28: %SEC-6-IPACCESSLOGP: list 110 denied tcp
208.194.150.10(80) (S
erial0 *PPP*) -> 216.64.1.142(2183), 1 packet
.Mar 8 17:45:45: %SEC-6-IPACCESSLOGP: list 110 denied tcp
216.52.56.50(80) (Ser
ial0 *PPP*) -> 216.64.1.198(2183), 3 packets
.Mar 8 17:49:45: %SEC-6-IPACCESSLOGP: list 110 denied tcp
208.194.150.10(80) (S
erial0 *PPP*) -> 216.64.1.142(2183), 2 packets
.Mar 9 07:39:04: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.143.228.10(80) (S
erial0 *PPP*) -> 216.64.1.82(2183), 1 packet
.Mar 9 07:44:18: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.143.228.10(80) (S
erial0 *PPP*) -> 216.64.1.82(2183), 9 packets
.Mar 9 09:53:46: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.185.181.10(80) (S
erial0 *PPP*) -> 216.64.1.227(2183), 1 packet
.Mar 9 09:59:24: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.185.181.10(80) (S
erial0 *PPP*) -> 216.64.1.227(2183), 9 packets
.Mar 9 12:11:55: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
*PPP*) -> 216.64.1.144(1319), 1 packet
.Mar 9 12:17:29: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
*PPP*) -> 216.64.1.144(1319), 8 packets
.Mar 9 12:22:30: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
*PPP*) -> 216.64.1.144(1319), 4 packets
---snip
Thanks
