Date: Wed, 01 Mar 2000 09:12:56 -0800 From: Joseph Scott <joseph.scott@owp.csus.edu> To: cjclark@home.com Cc: freebsd-security@FreeBSD.ORG Subject: Re: @Home Server Scanner? Message-ID: <38BD4F98.D6AB5887@owp.csus.edu> References: <20000301113847.B37590@cc942873-a.ewndsr1.nj.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
"Crist J. Clark" wrote: > > I appear to be scanned regularly by an @Home host, > > Name: ops-scan.home.net > Address: 24.0.94.130 > > It has been scanning my NNTP (119) port several times a day since the > beginning of February. Previous to that, it liked to check my HTTP > port (80) several times a day. That behavior dates to when I started > logging on the firewall in January. A while back ( month or two? ) @HOME was getting some serious heat to do something about the amount of spam their network was generating on the news groups. They promised to be take action and be better about it. They said most of the problem was people running poorly configured NNTP servers connected to @HOME. My cable service is apparently going to be using @HOME when they start offering cable net access, I don't really like the idea of them not allowing me to run a web server or such ( assuming it's properly configured ), but it is in their terms & conditions I believe. > > Anyone know anything about that host? Any other @Home users seeing > this too? My assumption is that it is @Home scanning for "illegal" > servers on their network. > > This machine has earned a, > > deny log ip from 24.0.94.130 to any > > In my firewall for now. -- Joseph Scott joseph.scott@owp.csus.edu Office Of Water Programs - CSU Sacramento To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38BD4F98.D6AB5887>