From owner-freebsd-isp  Tue Apr 24 13:23:32 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from aspenworks.com (aspenworks.com [192.94.236.1])
	by hub.freebsd.org (Postfix) with ESMTP id DDECB37B422
	for <freebsd-isp@FreeBSD.ORG>; Tue, 24 Apr 2001 13:23:27 -0700 (PDT)
	(envelope-from alex@aspenworks.com)
Received: from ibmxeon (matrix.aspenworks.com [216.38.199.82])
	by aspenworks.com (8.9.3/8.9.3) with SMTP id OAA44021;
	Tue, 24 Apr 2001 14:23:24 -0600 (MDT)
	(envelope-from alex@aspenworks.com)
Message-ID: <00a101c0ccfc$635e8e60$c800a8c0@aspenworks.com>
From: "alex huppenthal" <alex@aspenworks.com>
To: "Matthew Hunt" <mph@astro.caltech.edu>
Cc: "free" <freebsd-isp@FreeBSD.ORG>
References: <006301c0ccf5$4a5e4600$c800a8c0@aspenworks.com> <20010424130455.B27566@wopr.caltech.edu>
Subject: Re: IPFW ? hacked?
Date: Tue, 24 Apr 2001 14:23:12 -0600
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Okay, I get it.. ;-)


----- Original Message -----
From: "Matthew Hunt" <mph@astro.caltech.edu>
To: "alex huppenthal" <alex@aspenworks.com>
Cc: "free" <freebsd-isp@FreeBSD.ORG>
Sent: Tuesday, April 24, 2001 2:04 PM
Subject: Re: IPFW ? hacked?


> On Tue, Apr 24, 2001 at 01:32:21PM -0600, alex huppenthal wrote:
>
> > Interestingly, I see 205.149.189.91 as a destination IP address at port
5999
> > collecting data from x.x.18.3
> >
> > I don't know 205.149.189.91 or have any process running to that site.
> > However, the numbers are increasing.
>
> Are you sure you don't know that site?
>
> wopr:~$ host cvsup2.freebsd.org
> cvsup2.freebsd.org is a nickname for burka.rdy.com
> burka.rdy.com has address 205.149.189.91
> burka.rdy.com mail is handled (pri=20) by mail1.best.com
> burka.rdy.com mail is handled (pri=10) by burka.rdy.com
>
> wopr:~$ grep 5999 /etc/services
> cvsup           5999/tcp   #CVSup file transfer/John Polstra/FreeBSD
>
> Dima is a FreeBSD committer (dima@freebsd.org).
>
> --
> Matthew Hunt <mph@astro.caltech.edu> * Clearly there are more things in
the
> http://www.pobox.com/~mph/           * heavens than anyone
anticipated. -enp
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message