On Thursday 30 November 2000 09:18, you wrote:
On Wed, 29 Nov 2000, gene wrote:
There is an ip number that started showing up in my postfix logs
as trying to access my smtp server (and access was apparently
denied each time). I assumed that someone was trying to use
my machine as a
as trying to access my smtp server (and access
was apparently
Nov 28 23:59:07 duck kernel: Packet log: input
DENY eth1 PROTO=1
63.98.105.3:8 208.xxx.xxx.xx1:0 L=60 S=0x00
I=6793 F=0x T=114 (#1)
Someone please correct me if I am wrong, but this
isn't a relay attempt. It´s just
At 8:25 AM -0800 12/4/00, Ron Heron wrote:
as trying to access my smtp server (and access
was apparently
Nov 28 23:59:07 duck kernel: Packet log: input
DENY eth1 PROTO=1
63.98.105.3:8 208.xxx.xxx.xx1:0 L=60 S=0x00
I=6793 F=0x T=114 (#1)
Someone please correct me if I am
Sent: Thursday, November 30, 2000 1:47 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] Multiple attempted unauthorized accesses
I have a personal firewall set up on my Winbloze box. As soon as I made
it active I noticed I was being scanned constantly from a machine with
the same DNS. After four
I'm not getting attacked from this alter.net IP, but I am being
constantly scanned on consecutive ports usually ranging in the 21xx or
24xx range. My firewall (a windows based firewall/proxy ap on an
NT4 server) blocks both of these ranges, so all I see are requests on port
21xx and each is
You mean you are scanned thru the ports in the 2100 range and/or the
2400 range?
Huh. At first, I thought you meant ports 21-24, which would make
obvious sense
but I am not clear on the intent for checking out the 2100s or 2400s.
I have been running different types of scans against 63.98.105.3
You mean you are scanned thru the ports in the 2100 range and/or the
2400 range?
Huh. At first, I thought you meant ports 21-24, which would make
obvious sense
but I am not clear on the intent for checking out the 2100s or 2400s.
I have been running different types of scans against 63.98.105.3
You mean you are scanned thru the ports in the 2100 range and/or the
2400 range?
Huh. At first, I thought you meant ports 21-24, which would make
obvious sense
but I am not clear on the intent for checking out the 2100s or 2400s.
2100's and 2400's ranges.
I have been running different
There is an ip number that started showing up in my postfix logs
as trying to access my smtp server (and access was apparently
denied each time). I assumed that someone was trying to use
my machine as a relay. To make sure that they can't get through,
I blocked the ip address using ipchains.
I have a personal firewall set up on my Winbloze box. As soon as I made
it active I noticed I was being scanned constantly from a machine with
the same DNS. After four hours, I used ARIN to find the DNS and Netblock
owners and sent appropriate messages. I haven't been bothered over much
since.
You are not alone, I've also been attacked by someone from this
alter.net site. Do a google search for alter.net and you should find
more information.
From my searches, alter.net is a small? ISP in BC canada...
On Wed, 29 Nov 2000 22:17:42 -0800, you wrote:
There is an ip number that started
11 matches
Mail list logo
