Perhaps they hope you have a Cisco router running DLSW in promiscous mode,
therefore accepting connections from anywhere.
-----Original Message-----
From: Joe Matusiewicz <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>; Colin Campbell
<[EMAIL PROTECTED]>; Joshua Chamas <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: 19 March 1999 16:49
Subject: Re: Netbus Scanner Response ?
>Its kinda funny we're discussing this. Just ten minutes ago I sent out an
>email about a scan from Japan that targeted 25 hosts on one of my networks
>that was targeted to port 2065. I'm puzzled by the choice of this port.
>But what do you think the odds are that someone in Japan will respond?
>
>-- Joe
>
>
>At 10:10 AM 3/19/99 -0500, Dominick Glavach wrote:
>>Joe:
>>
>>I agree. I would add that one should verfiy that the scan was not part
>>of a larger more successful attack before following up on the detected
>>attempt. -AND- document the all events for future reference.
>>
>>
>>--
>>-----------------------------------------------------------------------
>>Dominick Glavach, IS Security/System Engineer [EMAIL PROTECTED]
>>Concurrent Technologies Corporation 814/269-2469
>
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
