Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Jul 2005 15:15:08 +0200
From:      "Norbert Koch" <NKoch@demig.de>
To:        "Cody Holland" <cholland@redmoonbroadband.com>, <freebsd-questions@freebsd.org>
Subject:   RE: Port Scan
Message-ID:  <000001c59376$609db760$4801a8c0@ws-ew-3.W2KDEMIG>
In-Reply-To: <4B3EE484EEA4F344BBB62F831648998637C8BB@corpsrv.RedMoon.local>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
> Does anyone know what could be causing this?  Some of these are probes
> from external IP's, but a lot of these are the servers probing itself.
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
> 

squid http proxy?


> > Connection attempt to UDP 206.123.80.170:1026 from 
> > 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:1027 
> > from 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:137

netbios-ns request to a samba server?


Norbert




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?000001c59376$609db760$4801a8c0>