Re: huge scans from www.oix.com

[rde () IRELANDS-WEB IE (Robert D. Elliott)]

On Fri, 28 Apr 2000, jose wrote:

> This morning i see in the system logs a huge of this messages
>
> xxx.xxx.37.3:21 L=40 S=0x00 I=64651 F=0x4000 T=46
> Apr 28 07:43:18 neptuno kernel: Packet log: input REJECT eth0 PROTO=6
> 205.189.131.3:23851

They're not that discerning; it was port 53 on my box. It was only for a
couple of minutes, though.

Apr 28 00:55:46 leviathan kernel: Packet log: input DENY eth0 PROTO=6
205.189.131.3:2947 xxx.xxx.22.1:53 L=44 S=0x00 I=37065 F=0x0000 T=47
Apr 28 00:55:49 leviathan kernel: Packet log: input DENY eth0 PROTO=6
205.189.131.3:2947 194.xxx.xxx.1:53 L=44 S=0x00 I=37123 F=0x0000 T=47

> what is the port 635?
mountd. http://advice.networkice.com/advice/Exploits/Ports is my first
stop for port queries.

Robert Elliott          Systems Administrator, Planet Cyber Cafe
rde () irelands-web ie  http://robertelliott.org