Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 04 Dec 1999 02:43:06 +0000
From:      jomor <jomor@ahpcns.com>
To:        "questions@freebsd.org" <questions@freebsd.org>
Subject:   Re: Portsentry-Attacks?
Message-ID:  <38487FBA.58DACD7B@ahpcns.com>
References:  <9912030336420S.00269@FBob.wt.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Since all of these are for port 80, I'd tend to think that there is  a website with a screwed-up link
pointing to your box.  Most of the scans that I see happening to my network are for port 111.

                    HTH   ...jgm


BobF wrote:

> If this query is posted to the wrong list, please advise.
>
> Being a bit paranoid in this day and age I installed Portsentry to see
> what/who  was trying to connect to my box. The results were a bit of a
> shock and I am wondering if the reported attacks are in fact real. Here
> is a sample of the blocked file generated by Portsentry:
>
> 944019385 - 11/30/99 21:36:25 Host: 98A903CE.ipt.aol.com/152.169.3.206 Port: 80 Blocked
> 944019618 - 11/30/99 21:40:18 Host: p3E9EDDA4.dip.t-dialin.net/62.158.221.164 Port: 80 Blocked
> 944020530 - 11/30/99 21:55:30 Host: dial56050.mtu-net.ru/195.34.56.50 Port: 80 Blocked
> SNIP...
> Anyone have any input as to the authenticity of the alleged
> "attacks" ?
>
> BobF
>
> Email: FBob@WT.NET
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38487FBA.58DACD7B>