Security Incidents mailing list archives

Linuxconf scanning


From: Ian Eure <ieure () SICKFUCK ORG>
Date: Mon, 7 Aug 2000 11:09:10 -0700

saw some linuxconf scanning this weekend...

-- snip --
Aug  5 15:29:33 spindle kernel: Packet log: ltraf REJECT eth0 PROTO=6
211.169.82.130:4450 aaa.bbb.ccc.ddd:98 L=60 S=0x00 I=16301 F=0x4000 T=43
SYN (#11)
Aug  5 15:29:33 spindle kernel: Packet log: ltraf REJECT eth0 PROTO=6
211.169.82.130:4450 aaa.bbb.ccc.ddd:98 L=60 S=0x00 I=16301 F=0x4000 T=43
SYN (#11)
-- snip --
$ grep 98\/tcp /etc/services
linuxconf       98/tcp                          # LinuxConf
$

a quick whois shows the 210/8 & 211/8 subnets as delegated to the
asia-pacific region. queries to whois.apnic.net were butt-slow and didn't
respond.

did anyone else see this over the weekend?

--
 ______________________________________________
| "the whole scale of cosmic dimensions are falling from my mouth
| in the description of a kiss of the interimlovers"
|   - einsturzende neubaten, "interim"


Current thread: