Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Network Probes

  • From: Matthew R. Potter
  • Date: Thu Mar 09 17:22:44 2000

>Hi,
>
>Has anyone else noticed probes against their network with a spoofed
>source address
>and Src (80) and Dst(2183)
Yes, all from Reserved(Private) IP's.. Over and over and over.. At two
minute intervals. 

Mar  9 11:48:52 xxxxxxxx ipmon[23116]: 11:48:52.169293              xl1
@0:4 b 10.2.8.31,80 -> xxx.xxx.xxx.xxx,51419 PR tcp len 20 40 -AF
Mar  9 11:49:28 xxxxxxxx ipmon[23116]: 11:49:28.286393              xl1
@0:3 b 172.16.0.142,80 -> xxx.xxx.xxx.xxx,6736 PR tcp len 20 163 -AFP

begins again... in 2 minutes.. same IP's, Flags and ports. 

M.






Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.