On Oct 27, 2002, 20:19 (+0100) Wolfgang Pfeiffer wrote: > that most of these activities is harmless ... but when they > explain here: > http://www.dshield.org/ports/port137.html > that "Windows has the habit of "probing" port 137" I can't relate this > to the scanning activities against my machine, because the WWW. pages > I try to access seem to be different from the machine that probe me ..
... *most* of them are different ... For example when I sent my previous message to this list I got "probed" (or whatever it is) by 66.187.233.31 on 113: 113 seems to be a sendmail port, and the IP seems to be a Redhat one :) ... and I sent my message with sendmail ... /var/log/messages: ########################## [ ... ] Oct 27 20:20:00 <machine name> kernel: Packet log: input DENY ppp0 PROTO=6 66.187.233.31:2947 80.138.166.77:113 L=60 S=0x00 I=56227 F=0x4000 T=54 SYN (#2) Oct 27 20:20:03 <machine name> kernel: Packet log: input DENY ppp0 PROTO=6 66.187.233.31:2947 80.138.166.77:113 L=60 S=0x00 I=56313 F=0x4000 T=56 SYN (#2) ######################### Regards Wolfgang -- Key on: http://home.t-online.de/home/520050060325-0001/ Key fingerprint = 5FFA E2D1 6DB5 C023 0C5F 3FA7 4E08 5F9F 1560 0BA8 Home Page: www.geocities.com/wolfgangpfeiffer/ -- END TRANSMISSION -- -- redhat-list mailing list unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
