Security Incidents mailing list archives

scanned - strange!


From: sir_scriptzalot () HOTMAIL COM (Sir Scriptzalot)
Date: Wed, 21 Jun 2000 09:58:18 EST


Check this out. It all seems weird.
Does anyone know what's happening here?
Host 10.3.2.15 (our host) crashed for inexplicable
reasons at about the same time the patterns below
ceased.

Regards,
Max

Max Steel
Omega-Xpress

time=epoch time
shost=source/remote host/ip - ISP
lhost=localhost - host on our network
sport=source *from* port
lport=port on local machine on our network

time            shost            lhost      sport   lport  bytes
                                                          transferred
961464997       212.216.176.40  10.3.2.15   25      2503    48
961464997       212.216.176.75  10.3.2.15   25      2505    48
961465005       212.216.176.50  10.3.2.15   25      2479    48
961465005       212.216.176.51  10.3.2.15   25      2538    272
961465009       212.216.176.75  10.3.2.15   25      2528    48
961465018       212.216.176.40  10.3.2.15   25      2491    48
961465019       212.216.176.76  10.3.2.15   25      2492    48
961465021       212.216.176.41  10.3.2.15   25      2494    48
961465029       212.216.176.32  10.3.2.15   25      2549    416
961465029       212.216.176.51  10.3.2.15   25      2538    48
961465036       212.216.176.44  10.3.2.15   25      2499    48
961465040       212.216.176.77  10.3.2.15   25      2550    320
961465047       212.216.176.40  10.3.2.15   25      2503    48

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


Current thread: