North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Network Probes

  • From: Scott McGrath
  • Date: Thu Mar 09 15:55:27 2000 
Hi,

Has anyone else noticed probes against their network with a spoofed
source address
and Src (80) and Dst(2183)

---Snip.
Mar  8 17:40:16: %SEC-6-IPACCESSLOGP: list 110 denied tcp
216.52.56.50(80) (Ser
ial0 *PPP*) -> 216.64.1.198(2183), 1 packet
.Mar  8 17:44:28: %SEC-6-IPACCESSLOGP: list 110 denied tcp
208.194.150.10(80) (S
erial0 *PPP*) -> 216.64.1.142(2183), 1 packet
.Mar  8 17:45:45: %SEC-6-IPACCESSLOGP: list 110 denied tcp
216.52.56.50(80) (Ser
ial0 *PPP*) -> 216.64.1.198(2183), 3 packets
.Mar  8 17:49:45: %SEC-6-IPACCESSLOGP: list 110 denied tcp
208.194.150.10(80) (S
erial0 *PPP*) -> 216.64.1.142(2183), 2 packets
.Mar  9 07:39:04: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.143.228.10(80) (S
erial0 *PPP*) -> 216.64.1.82(2183), 1 packet
.Mar  9 07:44:18: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.143.228.10(80) (S
erial0 *PPP*) -> 216.64.1.82(2183), 9 packets
.Mar  9 09:53:46: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.185.181.10(80) (S
erial0 *PPP*) -> 216.64.1.227(2183), 1 packet
.Mar  9 09:59:24: %SEC-6-IPACCESSLOGP: list 110 denied tcp
209.185.181.10(80) (S
erial0 *PPP*) -> 216.64.1.227(2183), 9 packets
.Mar  9 12:11:55: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
 *PPP*) -> 216.64.1.144(1319), 1 packet
.Mar  9 12:17:29: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
 *PPP*) -> 216.64.1.144(1319), 8 packets
.Mar  9 12:22:30: %SEC-6-IPACCESSLOGP: list 110 denied tcp 10.2.1.6(80)
(Serial0
 *PPP*) -> 216.64.1.144(1319), 4 packets
---snip

Thanks