13.07.2015 Views

2002 - cesnet

2002 - cesnet

2002 - cesnet

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

the originating address(es) listed or someone who has brokeninto your system(s) and is launching further attacks from yournetwork. Your computer(s) may also be infected by a network worm.Would you please try to investigate this and/or inform all partiesresponsible that their system(s) may be compromised?Please find below the appropriate IDS log excerpt(s).Time zone used: Central European Time (GMT+1).Yours sincerely,Intrusion Detection System, CESNET, Prague, The Czech Republic.P.S.: I am only a machine and there is no need to respond.However, should you need to contact my master, please do nothesitate to ‘reply’ to this letter. :-)***************************************************************351 connections from a.b.115.230 (pc2-eswd1.....com)Start of scan: 1038521917 = Thu Nov 28 23:18:37 <strong>2002</strong>1038521917 a.b.115.230 3844 -> 195.113.xxx.2 1433... skipping 349 lines ...1038601444 a.b.115.230 4919 -> 195.113.xxx.2 1433End of scan: 1038601444 = Fri Nov 29 21:24:04 <strong>2002</strong>.Duration: 22:05:27. Frequency: 0.265 [conn/min].***************************************************************302 connections from a.b.240.140 (pc1-oxfd1.....com)Start of scan: 1039015945 = Wed Dec 4 16:32:25 <strong>2002</strong>1039015945 a.b.240.140 24908 -> 195.113.xxx.2 21... skipping 300 lines ...1039017922 a.b.240.140 25362 -> 195.113.xxx.121 1080End of scan: 1039017922 = Wed Dec 4 17:05:22 <strong>2002</strong>.Duration: 0:32:57. Frequency: 9.165 [conn/min].***************************************************************16 connections from a.b.80.136 (pc1-hudd1.....com)Start of scan: 1038793330 = Mon Dec 2 02:42:10 <strong>2002</strong>1038793330 a.b.80.136 2942 -> 195.113.xxx.28 80... skipping 14 lines ...1038794681 a.b.80.136 3906 -> 195.113.xxx.28 80End of scan: 1038794681 = Mon Dec 2 03:04:41 <strong>2002</strong>.Duration: 0:22:31. Frequency: 0.711 [conn/min].Judging from reactions of those administrators who replied to these letters, it isobvious that they are grateful for this service.All software created within this project is continuously published on the FTPserver at ftp://ftp.<strong>cesnet</strong>.cz/local/audit/. Information about the progress of workand new versions of programs are delivered to all persons interested who registeredto the AUDIT-L@<strong>cesnet</strong>.cz mailing list.198 High-speed National Research Network and its New Applications <strong>2002</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!