From owner-freebsd-security Wed Aug 9 7:58:31 2000 Delivered-To: freebsd-security@freebsd.org Received: from genius.systems.pavilion.net (genius.systems.pavilion.net [212.74.1.100]) by hub.freebsd.org (Postfix) with ESMTP id B961D37BAF8 for ; Wed, 9 Aug 2000 07:58:27 -0700 (PDT) (envelope-from joe@pavilion.net) Received: by genius.systems.pavilion.net (Postfix, from userid 100) id 57CF29B2A; Wed, 9 Aug 2000 15:58:26 +0100 (BST) Date: Wed, 9 Aug 2000 15:58:26 +0100 From: Josef Karthauser To: George.Giles@mcmail.vanderbilt.edu Cc: freebsd-security@FreeBSD.ORG Subject: Re: who is port scanning at freebsd.org Message-ID: <20000809155826.H22672@pavilion.net> Mail-Followup-To: Josef Karthauser , George.Giles@mcmail.vanderbilt.edu, freebsd-security@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from George.Giles@mcmail.vanderbilt.edu on Wed, Aug 09, 2000 at 09:56:06AM -0500 X-NCC-RegID: uk.pavilion Organisation: Pavilion Internet plc, Lees House, 21-23 Dyke Road, Brighton, England Phone: +44-845-333-5000 Fax: +44-845-333-5001 Mobile: +44-403-596893 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, Aug 09, 2000 at 09:56:06AM -0500, George.Giles@mcmail.vanderbilt.edu wrote: > > My firewall reported a port scan attempt (8 times, not an accident) from > hub.freebsd.org. Is this normal behavior, or has your box been hacked? > > George Is it a port scan, or is it just trying to connect to the ident port? Joe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message