[Dshield] BIRCH

Doug White doug at dwhite.ws
Sun Jun 8 04:05:45 GMT 2003


It was just one shot over a few minutes.  Fortunately the firewall block him

BTW I am seeing a dramatic increase in SQL Slammer UDP scans in the past few
hours.

from a few per day to over 5000 is the past 5 hours.  Coming from everywhere.

======================================
Stop spam on your domain, use our gateway!
For hosting solutions http://www.clickdoug.com
ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772
======================================
If you are not satisfied with my service, my job isn't done!

----- Original Message ----- 
From: "John Sage" <jsage at finchhaven.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Saturday, June 07, 2003 10:11 PM
Subject: Re: [Dshield] BIRCH


| It's a port scan; noisy, not very subtle, kinda like a shotgun when a
| stiletto would do...
|
| On Sat, Jun 07, 2003 at 06:51:11PM -0500, Doug White wrote:
| > Anyone now what this is all about?
| > This individual attempted to access my computer 455 times
| > type,date,time,source,destination,transport,count
| > FWIN,2003/06/07,14:12:04,-5:00,65.16.166.162,12035,66.139.91.38,137,UDP,1
| > FWIN,2003/06/07,14:14:22,-5:00,65.16.166.162,1168,66.139.91.38,1008,TCP
| > (flags:S),1
| > FWIN,2003/06/07,14:14:22,-5:00,65.16.166.162,1169,66.139.91.38,1067,TCP
| > (flags:S),1
| > FWIN,2003/06/07,14:14:22,-5:00,65.16.166.162,1170,66.139.91.38,1127,TCP
| > (flags:S),1
| > FWIN,2003/06/07,14:14:22,-5:00,65.16.166.162,1171,66.139.91.38,1346,TCP
| > (flags:S),1
| <snip>
|
| ...see http://www.insecure.org/nmap/index.html for one tool to do just
| this sort of thing.
|
|
| - John
| -- 
| "You are in a twisty maze of weblogs, all alike."
|
| See our all-new look! http://www.finchhaven.com/
|
| _______________________________________________
| list mailing list
| list at dshield.org
| To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
|




More information about the list mailing list