Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 Apr 2000 16:22:47 +0200
From:      =?iso-8859-1?Q?Edstr=F6m?= Johan <johan.edstrom@hygiene.sca.se>
Cc:        FreeBSD Networking <freebsd-net@FreeBSD.ORG>
Subject:   Re: Help, I am being scanned!
Message-ID:  <38E8A937.826AA159@hygiene.sca.se>
References:  <200004031405.HAA05798@netcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
They are looking for open NNTP systems, search in the archives for more
info.


Stan Brown wrote:
> 
>         My ISP seems to be saning my system. Look here:
> 
> Apr  2 04:44:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:50869 24.6.61.166:119 in via ed1
> Apr  2 04:44:52 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:51466 24.6.61.166:119 in via ed1
> Apr  2 09:15:50 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:65458 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33055 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33274 24.6.61.166:119 in via ed1
> Apr  2 09:15:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:33483 24.6.61.166:119 in via ed1
> Apr  2 13:49:32 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55198 24.6.61.166:119 in via ed1
> Apr  2 13:49:33 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:55510 24.6.61.166:119 in via ed1
> Apr  2 18:25:40 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:36998 24.6.61.166:119 in via ed1
> Apr  2 18:25:41 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:37329 24.6.61.166:119 in via ed1
> Apr  2 23:13:35 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:44432 24.6.61.166:119 in via ed1
> Apr  2 23:13:36 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:45021 24.6.61.166:119 in via ed1
> Apr  3 03:47:29 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:53917 24.6.61.166:119 in via ed1
> 
>         That Ip translates to  authorized-scan.security.home.ne. I don't
>         recognize these ports, what are they? How can I protect myself against
>         their ssaning?
> 
>         Thanks.
> --
> Stan Brown     stanb@netcom.com                                    404-996-6955
> Factory Automation Systems
> Atlanta Ga.
> --
> Look, look, see Windows 95.  Buy, lemmings, buy!
> Pay no attention to that cliff ahead...            Henry Spencer
> (c) 1998 Stan Brown.  Redistribution via the Microsoft Network is prohibited.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

-- 
Unix is like a wigwam - no gates, no windows, apache inside
If windows is the answer, it must have been a stupid question.

#################################
 Johan Edstrm, SCA IT Services
 johan.edstrom@hygiene.sca.se
 Telephone      : +49 8035 80676
 Telefax        : +49 8035 80610 
 Cellular       : +49 172 8265375
#################################
[-- Attachment #2 --]
0	*H
010	+0	*H
R0N0
0
	*H
0,10
U
SGN10UCertificate Manager0
000216190936Z
010215190936Z010
U
SGN10
U
SCA10UHygiene Products10
UPeople10
	&,dseijoed10U
Edstrm Johan1+0)	*H
	johan.edstrom@hygiene.sca.se00
	*H
00mTqXv3}8?E^y/8RmQV]~u4*,xEke|KU FiLu`@YM6t^lšɸF0D0	`HB0U0U#09JmOϔ&0
	*H
Amd҉#<U‹"ʛܵ#۞o'dZi-8e:H10010,10
U
SGN10UCertificate Manager
0	+0	*H
	1	*H
0	*H
	1
000403142247Z0#	*H
	1aޘ5	.F0R	*H
	1E0C0
*H
0*H
0+0
*H
@0
*H
(0
	*H
]fO>
Xc
E-wuq=:Axؼ~+UN	
wеNl(E,λSCōIǝ_Q$n+h*VdG2A	<;Hս~

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38E8A937.826AA159>