[Dshield] Rise in version.bind scans?

Mark Tombaugh mtombaugh at alliedcc.com
Mon Jan 17 16:55:06 GMT 2005


On Monday 17 January 2005 09:31, M. Shirk wrote:
> I have seen recent version scan as well. I have flagged the IP but I have
> only seen one source.

>From 65.23.158.98? This IP scanned me last week, it did a named version 
attempt on 38751 IPs, most of them dark. After an e-mail and a phone call 
(and a couple of days for a response) they made it stop here. Just curious if 
they only egress filtered to my ip space. Thanks,

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Mark Tombaugh   <mtombaugh at alliedcc.com>
  Allied Computer   <http://www.alliedcc.com>
  USiHOST, iNC.   <http://www.usihost.com>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  67 Days Until Fatherhood!
  The average income of the modern teenager is about 2 a.m.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



More information about the list mailing list