Security Incidents mailing list archives

Anyone seen one like this?


From: "Cleary, Tom" <tcleary2 () CSC COM AU>
Date: Tue, 6 Feb 2001 12:59:56 +0800

Guys,

One of my boxes reported the following connection attempts today:

Source: 139.134.5.142                    11 entries,         5 destinations
    Destinations                      Count  First Entry     Last Entry
    <My IP>         :43565                  2  01/02/05 08:05  01/02/05
08:07
    <My IP>         :47508                  2  01/02/05 13:28  01/02/05
13:29
    <My IP>         :48193                  3  01/02/05 14:18  01/02/05
14:20
    <My IP>         :48132                  1  01/02/05 14:14  01/02/05
14:14
    <My IP>         :45863                  3  01/02/05 11:13  01/02/05
11:17

Because:

a) Not an automated scan
b) Not any ports I can find in the database
c) Doesn't seem to misdirected ASCII
d) Origin shows as mail8..bigpond.com.au

I thought I'd ask the list to enlighten me before I try mailing the contact
address.

Any ideas?

Regards,

tom.


Current thread: