Date: Tue, 24 Apr 2001 14:23:12 -0600 From: "alex huppenthal" <alex@aspenworks.com> To: "Matthew Hunt" <mph@astro.caltech.edu> Cc: "free" <freebsd-isp@FreeBSD.ORG> Subject: Re: IPFW ? hacked? Message-ID: <00a101c0ccfc$635e8e60$c800a8c0@aspenworks.com> References: <006301c0ccf5$4a5e4600$c800a8c0@aspenworks.com> <20010424130455.B27566@wopr.caltech.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Okay, I get it.. ;-) ----- Original Message ----- From: "Matthew Hunt" <mph@astro.caltech.edu> To: "alex huppenthal" <alex@aspenworks.com> Cc: "free" <freebsd-isp@FreeBSD.ORG> Sent: Tuesday, April 24, 2001 2:04 PM Subject: Re: IPFW ? hacked? > On Tue, Apr 24, 2001 at 01:32:21PM -0600, alex huppenthal wrote: > > > Interestingly, I see 205.149.189.91 as a destination IP address at port 5999 > > collecting data from x.x.18.3 > > > > I don't know 205.149.189.91 or have any process running to that site. > > However, the numbers are increasing. > > Are you sure you don't know that site? > > wopr:~$ host cvsup2.freebsd.org > cvsup2.freebsd.org is a nickname for burka.rdy.com > burka.rdy.com has address 205.149.189.91 > burka.rdy.com mail is handled (pri=20) by mail1.best.com > burka.rdy.com mail is handled (pri=10) by burka.rdy.com > > wopr:~$ grep 5999 /etc/services > cvsup 5999/tcp #CVSup file transfer/John Polstra/FreeBSD > > Dima is a FreeBSD committer (dima@freebsd.org). > > -- > Matthew Hunt <mph@astro.caltech.edu> * Clearly there are more things in the > http://www.pobox.com/~mph/ * heavens than anyone anticipated. -enp > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00a101c0ccfc$635e8e60$c800a8c0>