Security Incidents mailing list archives
Re: msnhome.talkcity.com
From: Ryan Yagatich <ryagatich () CSN1 COM>
Date: Mon, 24 Jul 2000 09:24:57 -0400
looks like a port scan. is it always on port 32768 ? ryan -----Original Message----- From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On Behalf Of Dirk Koopman Sent: Friday, July 21, 2000 4:08 AM To: INCIDENTS () SECURITYFOCUS COM Subject: msnhome.talkcity.com What are these and why?: Jul 21 08:52:00 gate kernel: Packet log: input DENY eth0 PROTO=6 209.143.224.160:32768 193.x.x.x:61304 L=44 S=0x00 I=9470 F=0x4000 T=231 SYN (#4) Jul 21 08:52:03 gate kernel: Packet log: input DENY eth0 PROTO=6 209.143.224.160:32768 193.x.x.x:61304 L=44 S=0x00 I=9472 F=0x4000 T=231 SYN (#4) and so on for several times (10 to 15 at a time) probably when someone connects to msnhome.talkcity.com to fiddle with their home page? -- Dirk-Jan Koopman, Tobit Computer Co Ltd At the source of every error which is blamed on the computer you will find at least two human errors, including the error of blaming it on the computer.
Current thread:
- Re: tin.it and others non collaborative isps., (continued)
- Re: tin.it and others non collaborative isps. Philipp Buehler (Jul 11)
- Re: tin.it and others non collaborative isps. Richard Bejtlich (Jul 11)
- Hostile email mmurray () TAOS COM (Jul 12)
- I Was rooted Andrew Heath (Jul 17)
- Obfuscated URL's in spam Kee Hinckley (Jul 18)
- 85.85.85.85 weirdness Wozz (Jul 18)
- Re: 85.85.85.85 weirdness Pascal Bouchareine (Jul 19)
- Re: 85.85.85.85 weirdness Wozz (Jul 19)
- Re: 85.85.85.85 weirdness Jud (Jul 19)
- msnhome.talkcity.com Dirk Koopman (Jul 21)
- Re: msnhome.talkcity.com Ryan Yagatich (Jul 24)
- Anyone ever heard of "rlumkaus" virus/bug/trojan/backdoor? Litscher, Steven (Jul 21)
- Sudden increase in scans. Rune Kristian Viken (Jul 20)
- Re: Sudden increase in scans. Aaron Kelley (Jul 24)
- Wierd Windows 98 bug? Mark Collins (Jul 20)
- Port 38293 Tim H (Jul 21)
- Re: Port 38293 Talisker (Jul 22)