[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] why does this look like its coming from my rack? port scanned
- Subject: [cobalt-security] why does this look like its coming from my rack? port scanned
- From: "David Smulsky" <dave@xxxxxxxxxxxxxxxx>
- Date: Mon, 16 Sep 2002 10:04:58 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Timestamp: Mon 16 Sep 2002 02:11:16 AM EDT
Alert Type: Port Scan Detected
Interface: eth0
Protocol: tcp
Packet Size (bytes): 40
Source Address: 29.my-ip.96.999
Source port: 8080
Direction: outbound
Destination Address: 61.344.142.156
Destination Port: 3132
Log Entry: eth0:portscan: tcp 29.my-ip.96.999
/8080 -> 61.344.142.156/3132 40 rst (17)
changed the IPs for confidentiality purposes :P
this is the 3rd one of these kinda scan detects...
dave