Security Incidents mailing list archives
DNS sweep from 38.144.72.132
From: John Pettitt <jpp () CLOUDVIEW COM>
Date: Sun, 18 Feb 2001 21:27:03 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
38.144.72.132 seems to be a Linux box - it swept my IP space with DNS
probes and if it got an answer sent a DNS version query.
Feb 18 00:53:26 gatekeeper snort[219]: MISC-DNS-version-query:
38.144.72.132:1801 -> 216.103.77.155:53
(time stamp is Pacific)
John Pettitt <jpp () cloudview com> AOL-IM: CanisRosa
SigInt bait ;-)
A big hello to the folks at Fort Meade, Menwith Hill and Pine Gap.
Keywords: NSA, Echelon, GCHQ, F83, Magnum, Mentor, P415, STEEPLEBUSH
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3
iQA/AwUBOpCup6dEVMR4hjZYEQK6+QCbBU4Pc296MgkrHvwLjpxNCuC84R4Anjug
Byo5n/FfuahkMxm6iS3bPK4z
=LaPJ
-----END PGP SIGNATURE-----
Current thread:
- DNS sweep from 38.144.72.132 John Pettitt (Feb 19)
