[Dshield] security.scan.sec.rr.com

Rick Leske rick at jaray.net
Wed Jun 18 19:02:15 GMT 2003


Maybe this is part of AOL trying to 'see' if any of there non bussiness
related accounts are using residental pipes for business class services like
email, web, etc.  Either way I would treat it as a HACKER attack.

~Rick

> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Doug White
> Sent: Wednesday, June 18, 2003 11:55 AM - FamHost
> To: General DShield Discussion List
> Subject: Re: [Dshield] security.scan.sec.rr.com
>
>
> Very normal for RR
>
> Their assertion:  "We reserve the absolute right to scan the
> origin of any mail
> sent to the rr servers"
>
> "If you object to this and wish to end the scanning, then do not
> send mail to
> the rr. servers."
>
> Now if they would give that much attention to the multiple open
> relays on their
> system that is spewing spam in unprecedented quantities.
>
> ======================================
> Stop spam on your domain, use our gateway!
> For hosting solutions http://www.clickdoug.com
> ISP rated: http://www.forta.com/cf/isp/isp.cfm?isp_id=772
> ======================================
> If you are not satisfied with my service, my job isn't done!
>
> ----- Original Message -----
> From: "Paul Marsh" <pmarsh at nmefdn.org>
> To: "'Dshield (E-mail)" <list at dshield.org>
> Sent: Wednesday, June 18, 2003 10:17 AM
> Subject: [Dshield] security.scan.sec.rr.com
>
>
> | Is it me or is this just a little too much BS generated by 2 rr e-mails
> yesterday afternoon?
> |
> | 6/17/2003 1:13:04 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 1:16:29 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 1:19:55 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 1:23:20 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 1:26:45 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 1:30:10 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 1:33:36 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 1:37:01 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 2:16:53 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 2:21:42 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 2:26:32 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 2:31:21 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 2:36:10 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 2:40:59 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 2:45:48 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 2:50:38 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 3:15:24 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 3:21:38 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 3:27:52 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 3:34:06 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 3:40:20 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 3:46:34 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 3:52:49 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 3:59:03 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 4:20:21 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 4:27:55 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 4:35:29 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 4:43:03 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 4:50:37 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 4:58:11 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 5:05:45 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 5:13:19 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 5:27:09 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 81
> | 6/17/2003 5:36:06 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 5:45:04 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 5:54:01 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 6:02:59 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 6:11:56 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 6:20:54 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 6:23:13 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 6:29:52 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 6:33:17 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 6:43:20 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 6:53:24 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 7:03:28 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 7:13:32 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 7:22:01 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 81
> | 6/17/2003 7:23:35 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 7:32:59 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 7:43:57 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 7:54:55 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 8:05:53 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 8:16:51 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 8:22:20 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 8:27:49 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 8:34:07 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 8:38:47 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 8:45:55 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 8:57:43 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 9:09:31 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 9:21:18 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 9:33:06 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 9:34:49 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 9:44:54 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/17/2003 9:47:24 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 9:59:58 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 10:23:43 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/17/2003 10:25:07 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 10:36:58 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 10:50:12 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 11:03:27 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/17/2003 11:16:42 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/17/2003 11:23:19 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 81
> | 6/17/2003 11:29:56 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/17/2003 11:37:21 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/17/2003 11:43:11 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/17/2003 11:51:22 PM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/17/2003 11:56:26 PM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 12:05:23 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 12:19:24 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 12:22:59 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 81
> | 6/18/2003 12:33:26 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 12:37:35 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 12:47:27 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 12:52:10 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 1:01:28 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 1:06:45 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 1:21:21 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 1:22:57 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/18/2003 1:35:56 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 1:38:07 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 1:50:32 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 1:53:16 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 2:05:07 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 2:23:35 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 2:38:45 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 2:53:54 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 2:54:59 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 3:09:04 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 3:10:39 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 3:23:15 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 81
> | 6/18/2003 3:26:18 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 3:39:26 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 3:41:58 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 3:55:36 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 3:57:38 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 4:11:47 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 4:13:17 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 4:27:57 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 4:41:03 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 4:44:08 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 4:57:41 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 5:14:20 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 5:16:29 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 5:24:21 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 81
> | 6/18/2003 5:30:58 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 5:41:28 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 5:47:36 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 5:58:34 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 6:04:14 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 6:15:41 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 6:20:52 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 6:25:02 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 81
> | 6/18/2003 6:32:47 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 6:42:36 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 6:49:54 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 7:00:10 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 7:07:00 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 7:17:44 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 7:24:07 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 7:25:38 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/18/2003 7:35:18 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 7:43:41 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 7:52:52 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 8:01:44 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 8:10:26 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 8:19:48 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 8:28:00 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 8:29:13 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 81
> | 6/18/2003 8:37:51 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 8:47:51 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 8:55:54 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 9:06:29 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 9:13:57 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 9:25:06 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 9:29:52 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 81
> | 6/18/2003 9:32:00 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 9:43:44 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 9:49:15 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 1080
> | 6/18/2003 10:02:22 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8000
> | 6/18/2003 10:08:38 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 3128
> | 6/18/2003 10:21:00 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8080
> | 6/18/2003 10:28:01 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 4480
> | 6/18/2003 10:30:27 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 81
> | 6/18/2003 10:39:37 AM TCP 24.30.199.228 2050 xxx.xxx.xxx.xxx 8081
> | 6/18/2003 10:47:24 AM TCP 24.30.199.228 2051 xxx.xxx.xxx.xxx 6588
> | 6/18/2003 10:50:53 AM TCP 24.30.199.228 2049 xxx.xxx.xxx.xxx 1080
> |
> | _______________________________________________
> | list mailing list
> | list at dshield.org
> | To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> |
> |
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.


___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list