From owner-freebsd-security@FreeBSD.ORG Sat Feb 7 06:16:56 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0042B16A4CE for ; Sat, 7 Feb 2004 06:16:56 -0800 (PST) Received: from lucidfactory.midasnetworks.com (lucidfactory.midasnetworks.com [66.112.235.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id DD76843D1D for ; Sat, 7 Feb 2004 06:16:55 -0800 (PST) (envelope-from jthibeaux@lucidfactory.com) Received: from THEFACTORY (adsl-64-218-163-219.dsl.austtx.swbell.net [64.218.163.219]) by lucidfactory.midasnetworks.com (Postfix) with ESMTP id 91193FA642; Sat, 7 Feb 2004 08:16:11 -0600 (CST) Message-ID: <04be01c3ed84$c5104670$3300a8c0@THEFACTORY> From: "Jeremy Thibeaux" To: "Mikhail Goriachev" References: <0FDD52D38220D611B7CC0004763B3744F80821@HNTS-04><4023AD12.6070106@sitetronics.com><6.0.0.22.2.20040206104336.0587c5a0@localhost><20040206151109.S921@cithaeron.argolis.org><6.0.0.22.2.20040206132723.058bf848@localhost><20040206212310.GJ94075@binary.net><1076133554.40247eb21c430@webmail.icenetworks.com> <3442.203.220.118.239.1076151405.squirrel@www.webanoide.org> Date: Sat, 7 Feb 2004 08:14:59 -0600 Organization: Lucid Factory MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 cc: security@freebsd.org Subject: wanadoo.fr X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Jeremy Thibeaux List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Feb 2004 14:16:56 -0000 wanadoo.fr is a major ISP in france. They are the primary provider of DSL service. Regards, Jeremy ----- Original Message ----- From: "Mikhail Goriachev" To: Cc: Sent: Saturday, February 07, 2004 4:56 AM Subject: Re: SYN Attacks - how i cant stop it > > > > How i cant stop the SYN and Port Scanner Attacks. I have a attacks all > > nights. > > Check this. > > I get this phenomena from time to time too... I reckon some kiddies are > trying to get in by scanning ports. > > > Feb 6 13:33:17 TCP: port scan mode expired for > > ANancy-106-1-4-183.w81-248.abo.wanadoo.fr (81.248.192.183) - received a > > total > > Now this wanadoo.fr looks familiar. Couple of months ago a friend of mine > detected way too much activity on his FTP server which wasn't secured > (just a default installation). He later found that someone (through > wanadoo.fr) was using his FTP server as a WAREZ storage by creating a > folder with " " name (just an empty space so you couldn't see it by having > a quick look using 'ls'). Off topic but I think this is worth mentioning. > > > > > Regards, > > Jean > > > > > > > > ------------------------------------------------- > > This mail sent through ICENetworks.com: http://www.icenetworks.com > > > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to > > "freebsd-security-unsubscribe@freebsd.org" > > > > > -- > -------------------------------------- > Mikhail Goriachev > Telephone: +61 (0)3 62252501 > Mobile Phone: +61 (0)4 38255158 > e-mail: mikhailg@webanoide.org > URL: http://www.webanoide.org > GPG Key ID: 4E148A3B > -------------------------------------- > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" >