You aren't, by chance, on a cable modem network, are you? My @Home provider scans my firewall on port 119 (news) all the time.
-ME -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Antti Tolamo Sent: Tuesday, October 16, 2001 1:06 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Port 119 scans This is my first post in list and I'm sorry if my post feels bit trivial. I'm not ISP, or hold a large network or LAN, just a person who has fixed IP with a Linux server. I use ipchains as a firewall and have small LAN with Windows clients. As it happens, I get majority of scans directed to me at port 119. And I can't understand why. I know it is not dangerous, but it really has start to bug me because it is continious. I don't think it is normal. How much scans to port 119 people who read this get proportinally to other scans? As a note, I've kept about year a server now, I don't get scared or annoyed if I'm just scanned a lot like some total newbie could. Sources vary. But most of them come, by looking domain names, from domain addresses that allocated through DHCP. No special country or place I could pinpoint however. So they are propably people who use ISP accounts and thus high propability they are script kiddies. Any ideas why I should get lot of scans to port 119? About month or two I've been getting these scans. Thanks in advance for any input. Antti _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
