Security Incidents mailing list archives

Scans......


From: Pavel Lozhkin <pauel () BALAKOVO RU>
Date: Thu, 9 Nov 2000 07:51:52 +0300

Hi !

i recently have got alot of scans from the various networks. I sent them
a mail a week ago and have no answer. And the scan has been
continuing.....
It is

inetnum:     212.13.171.0 - 212.13.171.255
netname:     ICA-TSE
descr:       International Consulting Agency
descr:       13A-99 Akjayik str. Astana
country:     KZ

Then i've block this net by my firewall. The same thing with the big
Moscow provider - PTT Telecom (inet 195.34.28.0).
Be advised

=== cut on ==
Nov  8 22:40:11 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3092
xxx.xxx.xxx.xxx:1243 out via ed0
Nov  8 22:40:11 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3093
xxx.xxx.xxx.xxx:6700 out via ed0
Nov  8 22:40:11 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3094
xxx.xxx.xxx.xxx:1080 out via ed0
Nov  8 22:40:11 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3095
xxx.xxx.xxx.xxx:27374 out via ed0
Nov  8 22:40:11 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3096
xxx.xxx.xxx.xxx:30100 out via ed0
Nov  8 22:40:14 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3094
xxx.xxx.xxx.xxx:1080 out via ed0
Nov  8 22:40:14 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3095
xxx.xxx.xxx.xxx:27374 out via ed0
Nov  8 22:40:14 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3096
xxx.xxx.xxx.xxx:30100 out via ed0
Nov  8 22:40:14 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3092
xxx.xxx.xxx.xxx:1243 out via ed0
Nov  8 22:40:14 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3093
xxx.xxx.xxx.xxx:6700 out via ed0
Nov  8 22:40:17 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3094
xxx.xxx.xxx.xxx:1080 out via ed0
Nov  8 22:40:17 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3095
xxx.xxx.xxx.xxx:27374 out via ed0
Nov  8 22:40:17 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3096
xxx.xxx.xxx.xxx:30100 out via ed0
Nov  8 22:40:17 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3092
xxx.xxx.xxx.xxx:1243 out via ed0
Nov  8 22:40:17 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3093
xxx.xxx.xxx.xxx:6700 out via ed0
Nov  8 22:40:20 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3094
xxx.xxx.xxx.xxx:1080 out via ed0
Nov  8 22:40:20 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3095
xxx.xxx.xxx.xxx:27374 out via ed0
Nov  8 22:40:20 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3096
xxx.xxx.xxx.xxx:30100 out via ed0
Nov  8 22:40:20 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3092
xxx.xxx.xxx.xxx:1243 out via ed0
Nov  8 22:40:20 gw /kernel: ipfw: 50000 Reset TCP 212.13.171.246:3093
xxx.xxx.xxx.xxx:6700 out via ed0
== cut off ==

--
** The hedgehog is a proud bird, he does not fly without kick **

Pauel
System administrator
ICQ UIN 39596913 8990192
Phone (7-84570)-52525
      (7-84570)-40658

Unix is like a wigwam -- no Gates, no Windows, and an Apache inside.


Current thread: