I suppose they are only checking you don't have an NNTP server installed.
Probably they are also scanning ports 80, 21 and so.
Javier Prieto Mart�nez
Equipo de Sistemas, Intranet del S.A.S.
e-Mail: [EMAIL PROTECTED]
> -----Mensaje original-----
> De: Michael Erdely [mailto:[EMAIL PROTECTED]]
> Enviado el: martes 16 de octubre de 2001 19:11
> Para: [EMAIL PROTECTED]
> Asunto: RE: Port 119 scans
>
>
> You aren't, by chance, on a cable modem network, are you?
>
> My @Home provider scans my firewall on port 119 (news) all the time.
>
> -ME
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Antti Tolamo
> Sent: Tuesday, October 16, 2001 1:06 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Port 119 scans
>
>
>
>
> This is my first post in list and I'm sorry if my post
> feels bit trivial. I'm not ISP, or hold a large network
> or LAN, just a person who has fixed IP with a Linux
> server. I use ipchains as a firewall and have small
> LAN with Windows clients.
>
> As it happens, I get majority of scans directed to me at
> port 119. And I can't understand why. I know it is not
> dangerous, but it really has start to bug me because it is
> continious. I don't think it is normal. How much scans to
> port 119 people who read this get proportinally
> to other scans?
>
> As a note, I've kept about year a server now,
> I don't get scared or annoyed if I'm just
> scanned a lot like some total newbie could.
>
> Sources vary. But most of them come, by looking domain
> names, from domain addresses that allocated through DHCP.
> No special country or place I could pinpoint however.
> So they are propably people who use ISP accounts and
> thus high propability they are script kiddies.
>
> Any ideas why I should get lot of scans to port 119? About month
> or two I've been getting these scans.
>
> Thanks in advance for any input.
>
> Antti
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
>
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
