[28113] in North American Network Operators' Group
Re: FCEN doing illegal port scanning on your networks?
daemon@ATHENA.MIT.EDU (Mr. James W. Laferriere)
Tue Apr 11 18:10:56 2000
Date: Tue, 11 Apr 2000 15:08:45 -0700 (PDT)
From: "Mr. James W. Laferriere" <babydr@baby-dragons.com>
To: Kai Schlichting <kai@pac-rim.net>
Cc: nanog@merit.edu
In-Reply-To: <4.2.2.20000411144408.02a38740@mail.speedus.net>
Message-ID: <Pine.LNX.4.21.0004111504020.7271-100000@filesrv1.baby-dragons.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Hello All, Hmmm, I'd be kinda suspicious of this activity .
The entities involved are -not- as swip'd . Do an nslookup
on the ip's provided in the document & check them against
the arin data . The nslookup's come back as hosts in abs.net
for the 143.247.*.* ip's provided . The only one that matches
is the 20.6.5.12 for both swip & nslookup data . Has anyone
contacted the admins involved ? Twyl, JimL
On Tue, 11 Apr 2000, Kai Schlichting wrote:
> http://gnutella.wego.com/go/wego.discussion.message?groupId=116705&view=message&curMsgId=120294&discId=116707&index=8&action=view
> You can make of this what you want, but: is anyone here getting port-scanned
> out of 143.247.0.0/16 or 20.0.0.0/8 ?
+----------------------------------------------------------------+
| James W. Laferriere | System Techniques | Give me VMS |
| Network Engineer | 25416 22nd So | Give me Linux |
| babydr@baby-dragons.com | DesMoines WA 98198 | only on AXP |
+----------------------------------------------------------------+
