Security Incidents mailing list archives

Recent Scans

From: ecovert () ICSCORP COM (Edwin Covert)
Date: Fri, 28 Jan 2000 15:39:41 -0500


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Recently we are seeing an increase in activity from 216.148.235.204
on ports 16114 and 554.  554 is the "real time stream control
protocol".  Is anyone familiar with this?  Thanks!

Ed Covert       

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>
Comment: "Some things should be seen and some should not..."

iQA/AwUBOJH+cDIjXbhrEgfyEQL91wCdGZxCem8suC3UlXwlXvnYoIrvQkYAoKpk
Uny/DfLZdR6kgszwlhqN9xjY
=SCBZ
-----END PGP SIGNATURE-----

Current thread:

Re: Korea (was RE: ?), (continued)
- - - Re: Korea (was RE: ?) horio shoichi (Jan 26)
    - Re: Korea (was RE: ?) David Brumley (Jan 27)
    - Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
    - Re: Korea (was RE: ?) Arrigo Triulzi (Jan 28)
    - Re: Korea (was RE: ?) Dug Song (Jan 28)
    - Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
    - DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
    - Recent Scans Edwin Covert (Jan 28)
    - Re: DNS update queries: another sort of suspicious activity. Rob Quinn (Jan 31)
    - Re: Socks port 1080 Randy Mclean (Jan 21)
    - Re: Socks port 1080 Richard Bejtlich (Jan 21)
    - Unusual Netstat Listing Rob (Jan 22)