Security Incidents mailing list archives

DNS sweep from 38.144.72.132


From: John Pettitt <jpp () CLOUDVIEW COM>
Date: Sun, 18 Feb 2001 21:27:03 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


38.144.72.132 seems to be a Linux box - it swept my IP space with DNS
probes and if it got an answer sent a DNS version query.

Feb 18 00:53:26 gatekeeper snort[219]: MISC-DNS-version-query:
38.144.72.132:1801 -> 216.103.77.155:53

(time stamp is Pacific)




John Pettitt <jpp () cloudview com>  AOL-IM: CanisRosa

SigInt bait ;-)
    A big hello to the folks at Fort Meade, Menwith Hill and Pine Gap.
    Keywords: NSA, Echelon, GCHQ, F83, Magnum, Mentor, P415, STEEPLEBUSH


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQA/AwUBOpCup6dEVMR4hjZYEQK6+QCbBU4Pc296MgkrHvwLjpxNCuC84R4Anjug
Byo5n/FfuahkMxm6iS3bPK4z
=LaPJ
-----END PGP SIGNATURE-----


Current thread: