From owner-freebsd-security Wed Aug 9 8: 8:27 2000 Delivered-To: freebsd-security@freebsd.org Received: from genius.systems.pavilion.net (genius.systems.pavilion.net [212.74.1.100]) by hub.freebsd.org (Postfix) with ESMTP id BE49937B61C for ; Wed, 9 Aug 2000 08:08:24 -0700 (PDT) (envelope-from joe@pavilion.net) Received: by genius.systems.pavilion.net (Postfix, from userid 100) id 893369B2A; Wed, 9 Aug 2000 16:08:22 +0100 (BST) Date: Wed, 9 Aug 2000 16:08:22 +0100 From: Josef Karthauser To: George.Giles@mcmail.vanderbilt.edu Cc: freebsd-security@FreeBSD.ORG Subject: Re: who is port scanning at freebsd.org Message-ID: <20000809160822.I22672@pavilion.net> Mail-Followup-To: Josef Karthauser , George.Giles@mcmail.vanderbilt.edu, freebsd-security@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from George.Giles@mcmail.vanderbilt.edu on Wed, Aug 09, 2000 at 10:02:34AM -0500 X-NCC-RegID: uk.pavilion Organisation: Pavilion Internet plc, Lees House, 21-23 Dyke Road, Brighton, England Phone: +44-845-333-5000 Fax: +44-845-333-5001 Mobile: +44-403-596893 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, Aug 09, 2000 at 10:02:34AM -0500, George.Giles@mcmail.vanderbilt.edu wrote: > > It is a port scan looking for smtpd. You mean a connection to port 25? Joe p.s. please keep freebsd-security on the Cc list. > On Wed, Aug 09, 2000 at 09:56:06AM -0500, > George.Giles@mcmail.vanderbilt.edu wrote: > > > > My firewall reported a port scan attempt (8 times, not an accident) from > > hub.freebsd.org. Is this normal behavior, or has your box been hacked? > > > > George > > Is it a port scan, or is it just trying to connect to the ident port? > > Joe > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message