[Dshield] Happy New Year! (TZ -08:00)

John Sage jsage at finchhaven.com
Thu Jan 1 08:23:03 GMT 2004


Here's to the very first for 2004!

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Jan  1 00:00:16 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.72.140.67 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=119 ID=2759
 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=63480
Jan  1 00:00:25 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.72.174.38 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=118 ID=2332
 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=26983
Jan  1 00:00:44 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.75.137.246 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=118 ID=37113
 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=22770
Jan  1 00:00:45 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.73.178.61 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=119 ID=65368
 PROTO=ICMP TYPE=8 CODE=0 ID=1024 SEQ=63732
Jan  1 00:00:47 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.72.170.156 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=118 ID=28417
 PROTO=ICMP TYPE=8 CODE=0 ID=1024 SEQ=44421
Jan  1 00:00:50 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.72.148.9 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=119 ID=30260
 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=65528
Jan  1 00:00:58 greatwall kernel: DROP: ICMP ping: IN=ppp0 OUT= MAC=
 SRC=12.73.55.209 DST=12.72.250.242 LEN=92 TOS=0x00 PREC=0x00 TTL=117 ID=4924
 PROTO=ICMP TYPE=8 CODE=0 ID=768 SEQ=48341

/* snip */



- John
-- 
"Mad cow? You'd be mad too, if someone was trying to eat you."
-
John Sage: InfoSec Groupie
-
ABCD, EFGH, IJKL, EmEnOh, Pplus+, Mminus-
-
ATTENTION: this entire message is privileged communication, intended
for the sole use of its recipients only. If you read it even though
you know you aren't supposed to, you're a poopy-head.




More information about the list mailing list