Date: Mon, 03 Apr 2000 16:22:47 +0200 From: =?iso-8859-1?Q?Edstr=F6m?= Johan <johan.edstrom@hygiene.sca.se> Cc: FreeBSD Networking <freebsd-net@FreeBSD.ORG> Subject: Re: Help, I am being scanned! Message-ID: <38E8A937.826AA159@hygiene.sca.se> References: <200004031405.HAA05798@netcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] They are looking for open NNTP systems, search in the archives for more info. Stan Brown wrote: > > My ISP seems to be saning my system. Look here: > > Apr 2 04:44:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:50869 24.6.61.166:119 in via ed1 > Apr 2 04:44:52 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:51466 24.6.61.166:119 in via ed1 > Apr 2 09:15:50 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:65458 24.6.61.166:119 in via ed1 > Apr 2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33055 24.6.61.166:119 in via ed1 > Apr 2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33274 24.6.61.166:119 in via ed1 > Apr 2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33483 24.6.61.166:119 in via ed1 > Apr 2 13:49:32 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55198 24.6.61.166:119 in via ed1 > Apr 2 13:49:33 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55510 24.6.61.166:119 in via ed1 > Apr 2 18:25:40 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:36998 24.6.61.166:119 in via ed1 > Apr 2 18:25:41 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:37329 24.6.61.166:119 in via ed1 > Apr 2 23:13:35 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:44432 24.6.61.166:119 in via ed1 > Apr 2 23:13:36 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:45021 24.6.61.166:119 in via ed1 > Apr 3 03:47:29 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:53917 24.6.61.166:119 in via ed1 > > That Ip translates to authorized-scan.security.home.ne. I don't > recognize these ports, what are they? How can I protect myself against > their ssaning? > > Thanks. > -- > Stan Brown stanb@netcom.com 404-996-6955 > Factory Automation Systems > Atlanta Ga. > -- > Look, look, see Windows 95. Buy, lemmings, buy! > Pay no attention to that cliff ahead... Henry Spencer > (c) 1998 Stan Brown. Redistribution via the Microsoft Network is prohibited. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message -- Unix is like a wigwam - no gates, no windows, apache inside If windows is the answer, it must have been a stupid question. ################################# Johan Edstrm, SCA IT Services johan.edstrom@hygiene.sca.se Telephone : +49 8035 80676 Telefax : +49 8035 80610 Cellular : +49 172 8265375 ################################# [-- Attachment #2 --] 0 *H 010 + 0 *H R0N0 0 *H 0,10 U SGN10UCertificate Manager0 000216190936Z 010215190936Z010 U SGN10 U SCA10UHygiene Products10 UPeople10 &,dseijoed10U Edstrm Johan1+0) *H johan.edstrom@hygiene.sca.se00 *H 0 0mTqXv3}8?E^y/8RmQV]~u4*,xEke|KU FiLu`@YM6t^lšɸ F0D0 `HB0U0U#09JmOϔ&0 *H A md҉#<U"ʛܵ#۞o'dZi-8e:H10010,10 U SGN10UCertificate Manager 0 + 0 *H 1 *H 0 *H 1 000403142247Z0# *H 1aޘ5 .F0R *H 1E0C0 *H 0*H 0+0 *H @0 *H (0 *H ] fO> Xc E-wuq=:Axؼ~+UN wеNl(E,λSCōIǝ_Q$n+h*VdG2A <;Hս~
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38E8A937.826AA159>
