[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] Daily mass scan from APNIC?
- To: "Full-Disclosure (E-mail)" <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: [Full-Disclosure] Daily mass scan from APNIC?
- From: James Lay <jlay@xxxxxxxxxxxx>
- Date: Sat, 11 Sep 2004 07:50:39 -0600
Heh...I get this every morning like clockwork:
Sep 11 07:46:30 gateway snort: Portscan detected from 220.72.57.52
Talker(fixed: 0 sliding: 0) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:31 gateway snort: Portscan detected from 220.72.57.52
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:46:33 gateway snort: Portscan detected from 220.120.165.204
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:33 gateway snort: Portscan detected from 61.85.92.237
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:34 gateway snort: Portscan detected from 220.120.165.204
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:46:41 gateway snort: Portscan detected from 222.103.9.13
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:42 gateway snort: Portscan detected from 222.103.9.13
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:46:43 gateway snort: Portscan detected from 221.156.232.234
Talker(fixed: 0 sliding: 0) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:44 gateway snort: Portscan detected from 221.156.232.234
Talker(fixed: 1 sliding: 1) Scanner(fixed: 20 sliding: 20)
Sep 11 07:46:50 gateway snort: Portscan detected from 221.155.158.165
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:46:53 gateway snort: Portscan detected from 221.155.158.165
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:47:09 gateway snort: Portscan detected from 221.152.85.62
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:47:10 gateway snort: Portscan detected from 221.152.85.62
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:47:16 gateway snort: Portscan detected from 220.221.11.189
Talker(fixed: 0 sliding: 0) Scanner(fixed: 5 sliding: 5)
Sep 11 07:47:17 gateway snort: Portscan detected from 220.221.11.189
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Sep 11 07:47:18 gateway snort: Portscan detected from 220.221.11.189
Talker(fixed: 10 sliding: 10) Scanner(fixed: 24 sliding: 24)
Sep 11 07:47:28 gateway snort: Portscan detected from 220.77.225.211
Talker(fixed: 1 sliding: 1) Scanner(fixed: 5 sliding: 5)
Sep 11 07:47:29 gateway snort: Portscan detected from 220.77.225.211
Talker(fixed: 2 sliding: 2) Scanner(fixed: 20 sliding: 20)
Anyone else seeing these?
James Lay
Network Manager/Security Officer
AmeriBen Solutions/IEC Group
Deo Gloria!!!
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html