Security Incidents mailing list archives

Scans from reserved addresses??

From: tgue () TECHEM DE (Ralf Günthner)
Date: Wed, 10 May 2000 12:51:25 +0200


I see a lot of connection attempts on port 51962 from addresses like these:

68.128.1.2
74.128.1.1
69.144.1.22
.....

All addresses are "reserved-7" according to ARIN. Any ideas, what's going on here?
I thought at first it's an nmap scan with the decoy option enabled...

Cheers
Ralf G.

Current thread:

Scans from reserved addresses?? Ralf Günthner (May 10)
- Scans dedicated to DNS servers. jacques (Feb 13)
- Re: Scans from reserved addresses?? Bryan Andersen (May 11)