From owner-freebsd-security  Sat Jul 21  7: 6:25 2001
Delivered-To: freebsd-security@freebsd.org
Received: from ct980320-b.blmngtn1.in.home.com (ct980320-b.blmngtn1.in.home.com [65.8.207.32])
	by hub.freebsd.org (Postfix) with ESMTP id 1B1B637B403
	for <freebsd-security@freebsd.org>; Sat, 21 Jul 2001 07:06:23 -0700 (PDT)
	(envelope-from mikes@ct980320-b.blmngtn1.in.home.com)
Received: (from mikes@localhost)
	by ct980320-b.blmngtn1.in.home.com (8.11.4/8.11.4) id f6LE6Am32960;
	Sat, 21 Jul 2001 09:06:10 -0500 (EST)
	(envelope-from mikes)
From: Mike Squires <mikes@ct980320-b.blmngtn1.in.home.com>
Message-Id: <200107211406.f6LE6Am32960@ct980320-b.blmngtn1.in.home.com>
Subject: Re: Recent probes
In-Reply-To: <00b401c11182$fb2f8260$0401a8c0@swbell.net> "from David Powers at
 Jul 20, 2001 08:17:59 pm"
To: David Powers <dnpowers@swbell.net>
Date: Sat, 21 Jul 2001 09:06:10 -0500 (EST)
Cc: freebsd-security@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL88 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> I have been getting a rash of probes to TCP/80 recently, is there a recent
> issue that they might be trying to exploit?  Below is the data on the probes
> origination.

Check out www.dshield.org; they show a majority of probes in the past 5 days
to have been on port 80.

MLS

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message