climateprediction.net home page
All Port Scan Attack

All Port Scan Attack

Questions and Answers : Windows : All Port Scan Attack
Message board moderation

To post messages, you must log in.

AuthorMessage
old_user21650

Send message
Joined: 28 Sep 04
Posts: 12
Credit: 125,275
RAC: 0
Message 11465 - Posted: 29 Mar 2005, 12:32:40 UTC

Hi, all -

I'm running Microsoft ISA 2004 as a proxy server and firewall at home. As of yesterday, I began receiving alerts from the firewall about All Port Scan attacks from 163.1.13.17. I used SamSpade to see where that address was, and found out the following:

climateapps2.oucs.ox.ac.uk = [ 163.1.13.17 ]
Domain:
ox.ac.uk
Registered For:
University of Oxford
Registered By:
JANET
Servers:
dns0.ox.ac.uk
dns1.ox.ac.uk
dns2.ox.ac.uk
ns2.ja.net
Entry updated:
Monday 29th November 2004
Entry created:
Wednesday 17th September 2003

Anyone else seeing port scans from ClimatePrediction's network?
ID: 11465 · Report as offensive     Reply Quote
Gareth Lock

Send message
Joined: 2 Sep 04
Posts: 51
Credit: 451,236
RAC: 0
Message 11480 - Posted: 29 Mar 2005, 20:54:01 UTC

Not had this problem myself, but this sort of behaviour might tally up with the fact that the box I run CPDN on couldn't see the CPDN scheduler, or the website for that matter. This could indicate some sort of infection or attack on the project server, let's hope they have this one nailed.


<img src="http://boinc.mundayweb.com/one/stats.php?userID=444&amp;trans=off">
ID: 11480 · Report as offensive     Reply Quote

Questions and Answers : Windows : All Port Scan Attack

©2024 cpdn.org