Security Incidents mailing list archives
netpay.tv connections
From: "Dave" <bugtraq () neuromancer cx>
Date: Sat, 3 Jan 2004 16:31:06 -0800 (PST)
For at least the past 36 hours I've been getting connectons from netpay. I'm not sure if they are spoofed or not. The site doesnt appear to be online. Anyone else seeing this? here is a snip of tcpdump. I'm dropping the packets now though. 16:26:04.384446 netpay.tv.50971 > neuromancer.http: S 2510312004:2510312004(0) win 32120 <mss 1460,sackOK,timestamp 1054041 1342177280,nop,wscale 0> (DF) 16:26:23.879499 netpay.tv.10914 > neuromancer.http: S 145676099:145676099(0) win 32120 <mss 1460,sackOK,timestamp 7689247 1073741824,nop,wscale 0> (DF) 16:26:43.380204 netpay.tv.27754 > neuromancer.http: S 3896401425:3896401425(0) win 32120 <mss 1460,sackOK,timestamp 3454532 2130706432,nop,wscale 0> (DF) 16:27:03.943005 netpay.tv.3174 > neuromancer.http: S 1901546852:1901546852(0) win 32120 <mss 1460,sackOK,timestamp 2582705 2113929216,nop,wscale 0> (DF --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- netpay.tv connections Dave (Jan 05)
- Re: netpay.tv connections Harlan Carvey (Jan 05)
- Re: netpay.tv connections Jeremiah Cornelius (Jan 05)
- Re: netpay.tv connections Chris Ess (Jan 05)