Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 Apr 2000 16:22:47 +0200
From:      =?iso-8859-1?Q?Edstr=F6m?= Johan <johan.edstrom@hygiene.sca.se>
Cc:        FreeBSD Networking <freebsd-net@FreeBSD.ORG>
Subject:   Re: Help, I am being scanned!
Message-ID:  <38E8A937.826AA159@hygiene.sca.se>
References:  <200004031405.HAA05798@netcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a cryptographically signed message in MIME format.

--------------ms6912F5CAFF51ADA2546ED9BA
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

They are looking for open NNTP systems, search in the archives for more
info.


Stan Brown wrote:
> 
>         My ISP seems to be saning my system. Look here:
> 
> Apr  2 04:44:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:50869 24.6.61.166:119 in via ed1
> Apr  2 04:44:52 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:51466 24.6.61.166:119 in via ed1
> Apr  2 09:15:50 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:65458 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33055 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33274 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33483 24.6.61.166:119 in via ed1
> Apr  2 13:49:32 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55198 24.6.61.166:119 in via ed1
> Apr  2 13:49:33 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55510 24.6.61.166:119 in via ed1
> Apr  2 18:25:40 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:36998 24.6.61.166:119 in via ed1
> Apr  2 18:25:41 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:37329 24.6.61.166:119 in via ed1
> Apr  2 23:13:35 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:44432 24.6.61.166:119 in via ed1
> Apr  2 23:13:36 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:45021 24.6.61.166:119 in via ed1
> Apr  3 03:47:29 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:53917 24.6.61.166:119 in via ed1
> 
>         That Ip translates to  authorized-scan.security.home.ne. I don't
>         recognize these ports, what are they? How can I protect myself against
>         their ssaning?
> 
>         Thanks.
> --
> Stan Brown     stanb@netcom.com                                    404-996-6955
> Factory Automation Systems
> Atlanta Ga.
> --
> Look, look, see Windows 95.  Buy, lemmings, buy!
> Pay no attention to that cliff ahead...            Henry Spencer
> (c) 1998 Stan Brown.  Redistribution via the Microsoft Network is prohibited.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

-- 
Unix is like a wigwam - no gates, no windows, apache inside
If windows is the answer, it must have been a stupid question.

#################################
 Johan Edström, SCA IT Services
 johan.edstrom@hygiene.sca.se
 Telephone      : +49 8035 80676
 Telefax        : +49 8035 80610 
 Cellular       : +49 172 8265375
#################################
--------------ms6912F5CAFF51ADA2546ED9BA
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms6912F5CAFF51ADA2546ED9BA--



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38E8A937.826AA159>