Receiving constant hits from random hosts
From: Adam Young (adam@vbfx.com)Date: 07/06/02
- Previous message: Seth Arnold: "Re: OpenSSH 3.4 rpm spec file for redhat"
- Next in thread: Manfred BERTL: "Re: Receiving constant hits from random hosts"
- Reply: Manfred BERTL: "Re: Receiving constant hits from random hosts"
- Reply: Bojan Zdrnja: "Re: Receiving constant hits from random hosts"
- Reply: Jeffrey Denton: "Re: Receiving constant hits from random hosts"
- Reply: Dave Millen: "Re: Receiving constant hits from random hosts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 6 Jul 2002 02:42:56 -0400 From: Adam Young <adam@vbfx.com> To: focus-linux@securityfocus.com
---------
Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=35583 DF PROTO=TCP SPT=4102 DPT=1080 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=36095 DF PROTO=TCP SPT=4104 DPT=8080 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:15 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=36351 DF PROTO=TCP SPT=4105 DPT=81 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:24 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=3840 DF PROTO=TCP SPT=4106 DPT=8000 WINDOW=32767 RES=0x00 SYN URGP=0
Jul 5 18:00:36 element kernel: (catch-all logging):: IN=eth0 OUT= MAC=*
SRC=24.127.132.75 DST=24.215.32.42 LEN=48 TOS=0x00 PREC=0x00 TTL=111
ID=43008 DF PROTO=TCP SPT=4106 DPT=8000 WINDOW=32767 RES=0x00 SYN URGP=0
---------
I get this above scan, along with scans on default 1080/3128(or whatever
squids port is), and all of these are hourly, almost as if someone has
setup a cron job to scan my system on the hour each hour. Is this
normal? I've never seen it so prevelant in my system logs, so I figured
I'd post. Any ideas or comments would be greatly appreciated.
Adam
- application/pgp-signature attachment: stored
- Previous message: Seth Arnold: "Re: OpenSSH 3.4 rpm spec file for redhat"
- Next in thread: Manfred BERTL: "Re: Receiving constant hits from random hosts"
- Reply: Manfred BERTL: "Re: Receiving constant hits from random hosts"
- Reply: Bojan Zdrnja: "Re: Receiving constant hits from random hosts"
- Reply: Jeffrey Denton: "Re: Receiving constant hits from random hosts"
- Reply: Dave Millen: "Re: Receiving constant hits from random hosts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]