nanog mailing list archives

Re: FCEN doing illegal port scanning on your networks?


From: "Mr. James W. Laferriere" <babydr () baby-dragons com>
Date: Tue, 11 Apr 2000 15:08:45 -0700 (PDT)



        Hello All,  Hmmm, I'd be kinda suspicious of this activity .
        The entities involved are -not- as swip'd  .  Do an nslookup
        on the ip's provided in the document & check them against
        the arin data .  The nslookup's come back as hosts in abs.net
        for the 143.247.*.* ip's provided .  The only one that matches
        is the 20.6.5.12 for both swip & nslookup data .  Has anyone
        contacted the admins involved ?  Twyl,  JimL

On Tue, 11 Apr 2000, Kai Schlichting wrote:
http://gnutella.wego.com/go/wego.discussion.message?groupId=116705&view=message&curMsgId=120294&discId=116707&index=8&action=view
You can make of this what you want, but: is anyone here getting port-scanned
out of 143.247.0.0/16 or 20.0.0.0/8 ?
       +----------------------------------------------------------------+
       | James   W.   Laferriere | System  Techniques | Give me VMS     |
       | Network        Engineer | 25416      22nd So |  Give me Linux  |
       | babydr () baby-dragons com | DesMoines WA 98198 |   only  on  AXP |
       +----------------------------------------------------------------+




Current thread: