[home] [<-back] [index] [next->]
____________________________________________________________________ [13:. [ Mailbag ] [mail@b0g.org] :. ] ____________________________________________________________________ From: Chuck Jackson [c.h.jackson@larc.nasa.gov] To: [admin@b0g.org] Cc: [nasirc@nasirc.hq.nasa.gov]; [abuse@qwestip.net] Subject: Hostile Activity Date: Tuesday, March 23, 2000 10:08 AM This notice is to inform you that UNAUTHORIZED ACTIVITY against NASA Langley Research Center computer systems has been detected and appears to be coming from a system in your domain. We would appreciate it if you would look into this incident to determine if it actually originated from the indicated system/ip address, in which case we request that you take the appropriate action against the offender. It is possible that your system may have been compromised OR the ip address was spoofed. Please examine your logs to determine which occurred. ALL TIMES ARE EASTERN STANDARD TIME! These systems are US Government computers owned and operated by NASA. Any attempt to break into these machines is taken as a serious matter. We are required to follow up on such activity and report it to the appropriate organizations and legal authorities which, in some cases, includes the NASA Office of the Inspector General, and the FBI. We take unauthorized accesses or even ATTEMPTS at access very seriously. Can you please investigate this activity and reply? THANK YOU for your assistance. 19Mar00 17:48:24 proto tcp src b0g.org dst ???.???.???.?? service 1742 s_port 68 len 40 rule 0 19Mar00 17:59:31 proto tcp src b0g.org dst ???.???.???.?? service 1192 s_port 64746 len 40 rule 0 19Mar00 18:03:00 proto tcp src b0g.org dst ???.???.???.??? service 1229 s_port 20273 len 40 rule 0 19Mar00 18:13:59 proto tcp src b0g.org dst ???.???.???.??? service 1267 s_port 20866 len 40 rule 0 19Mar00 18:18:39 proto tcp src b0g.org dst ???.???.???.??? service 1267 s_port 48775 len 40 rule 0 19Mar00 18:23:25 proto tcp src b0g.org dst ???.???.???.?? service 1394 s_port 12167 len 40 rule 0 19Mar00 18:45:39 proto tcp src b0g.org dst ???.???.???.??? service 1558 s_port 14893 len 40 rule 0 19Mar00 18:49:37 proto tcp src b0g.org dst ???.???.???.??? service OpenWindows s_port 38722 len 40 rule 0 19Mar00 18:49:38 proto tcp src b0g.org dst ???.???.??.??? service OpenWindows s_port 38793 len 40 rule 0 19Mar00 18:52:25 proto tcp src b0g.org dst ???.???.???.??? service OpenWindows s_port 55541 len 40 rule 0 19Mar00 19:14:59 proto tcp src b0g.org dst ???.???.?.??? service 2164 s_port 60067 len 40 rule 0 Chuck Jackson Information Technology Security NASA Langley Research Center (757) 864-7410 c.h.jackson@larc.nasa.gov computer-security@larc.nasa.gov (757) 864-4200 b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@! b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@! b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@! b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@! b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!b0g!#@!