Security Incidents mailing list archives
DNS sweep from 38.144.72.132
From: John Pettitt <jpp () CLOUDVIEW COM>
Date: Sun, 18 Feb 2001 21:27:03 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 38.144.72.132 seems to be a Linux box - it swept my IP space with DNS probes and if it got an answer sent a DNS version query. Feb 18 00:53:26 gatekeeper snort[219]: MISC-DNS-version-query: 38.144.72.132:1801 -> 216.103.77.155:53 (time stamp is Pacific) John Pettitt <jpp () cloudview com> AOL-IM: CanisRosa SigInt bait ;-) A big hello to the folks at Fort Meade, Menwith Hill and Pine Gap. Keywords: NSA, Echelon, GCHQ, F83, Magnum, Mentor, P415, STEEPLEBUSH -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQA/AwUBOpCup6dEVMR4hjZYEQK6+QCbBU4Pc296MgkrHvwLjpxNCuC84R4Anjug Byo5n/FfuahkMxm6iS3bPK4z =LaPJ -----END PGP SIGNATURE-----
Current thread:
- DNS sweep from 38.144.72.132 John Pettitt (Feb 19)