From owner-freebsd-chat Tue Nov 9 12:19:33 1999 Delivered-To: freebsd-chat@freebsd.org Received: from mail.enteract.com (mail.enteract.com [207.229.143.33]) by hub.freebsd.org (Postfix) with ESMTP id 8063614C94; Tue, 9 Nov 1999 12:19:24 -0800 (PST) (envelope-from dscheidt@enteract.com) Received: from shell-3.enteract.com (dscheidt@shell-3.enteract.com [207.229.143.42]) by mail.enteract.com (8.9.3/8.9.3) with SMTP id OAA68385; Tue, 9 Nov 1999 14:19:17 -0600 (CST) (envelope-from dscheidt@enteract.com) Date: Tue, 9 Nov 1999 14:19:17 -0600 (CST) From: David Scheidt To: Kris Kennaway Cc: Mike Pritchard , Lawrence Sica , chat@freebsd.org Subject: Re: Port 137 hitting my server In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 9 Nov 1999, Kris Kennaway wrote: > On Tue, 9 Nov 1999, Mike Pritchard wrote: > > > I've noticed a lot of these types of hits after playing around > > with alladvantage.com (get paid to surf the web!). I have no idea > > what they are looking for. At least from that particular web site, > > I haven't seen any real pattern to it, except that I see more of them > > after making use of their software. > > The dilbert.com website used to give me reverse port 80 scans (I think it > was port 80)..my best guess was that it was either some kind of > demographic profiling from an advertiser or a spamming business run by > dogbert looking for addresses. The doubleclick people used to do something that looked suspicious, the claimed purpose of which was to figure out which of their servers you were closest to, in order to sell you better. I don't remember what it is, and since *.doubleclick.net looks up as 127.0.0.1 from here, I can't be bothered to check. David Scheidt To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message