On Wed, Jul 25, 2001 at 05:21:34PM +0800, Fritz Mesedilla wrote:
> there is this certain ip address that keeps on probing our server:
>
> 192.169.39.67
> 192.169.39.68
> 192.169.39.69
> 192.169.39.70
> 192.169.39.71
> 192.169.39.72
>
> is this person using a new scanner that spoofs the ip address?
>
> someone advised me never to retaliate on a scan. as i try to reverse scan i
> may probe an innocently compromised server.
>
> so what am i to do?
These IPs look like a farm of Squid proxy servers (port 8080)
from Pacific Internet.
--
.--. Michael J. Maravillo office://+63.2.894.3592/
( () ) Q Linux Solutions, Inc. mobile://+63.917.897.0919/
`--\\ A Philippine Open Source Solutions Co. http://www.q-linux.com/
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
