Date: Thu, 28 Jul 2005 15:15:08 +0200 From: "Norbert Koch" <NKoch@demig.de> To: "Cody Holland" <cholland@redmoonbroadband.com>, <freebsd-questions@freebsd.org> Subject: RE: Port Scan Message-ID: <000001c59376$609db760$4801a8c0@ws-ew-3.W2KDEMIG> In-Reply-To: <4B3EE484EEA4F344BBB62F831648998637C8BB@corpsrv.RedMoon.local>
next in thread | previous in thread | raw e-mail | index | archive | help
> Does anyone know what could be causing this? Some of these are probes > from external IP's, but a lot of these are the servers probing itself. > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 > squid http proxy? > > Connection attempt to UDP 206.123.80.170:1026 from > > 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:1027 > > from 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:137 netbios-ns request to a samba server? Norbert
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000001c59376$609db760$4801a8c0>