> 1 packets: 203.97.101.36(20480) ->202.218.93.62(161), : Oct 16 09:40:23
> 1 packets: 203.97.101.36(20480) ->202.218.93.7(161), : Oct 16 09:40:30
> 1 packets: 203.97.101.36(20480) ->202.218.93.8(161), : Oct 16 09:40:30
> 1 packets: 203.97.101.36(20480) ->202.218.93.9(161), : Oct 16 09:40:30
> 1 packets: 209.46.83.2(61258) ->202.218.93.3(161), : Oct 20 18:59:45
> 1 packets: 209.46.83.2(62408) ->202.218.93.4(161), : Oct 20 19:45:04
> 1 packets: 209.46.83.2(63008) ->202.218.93.2(161), : Oct 20 18:14:08
That's SNMP.
It should be mentioned that accidental SNMP scans are very common.
All it takes is a screw-up in a network managment autodiscover
program. Also, at lease one version of HP's printer software will
SNMP scan huge chunks of the Internet if you let it.
Of course, that makes plausible deniability easier, too.
Ryan
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
