Message-ID: <3A2BAE89.87C8C5C4@iname.com> Date: Mon, 04 Dec 2000 14:47:37 +0000 From: Chris Reeves <chris.reeves@iname.com> Subject: Re: [SLE] Am I being scanned? Dennis James wrote:
I found this in my argus log and I want to make sure what it means. Thanks.
Sun 12/03 13:20:16 tcp 192.168.1.1.4288 o> 192.231.221.145.80 13 15 335 6046 TIMSun 12/03 13:20:16 tcp 64.217.248.145.63776 o> 192.231.221.145.80 13 15 335 6046 TIM Sun 12/03 13:26:13 tcp 64.217.248.145.63786 <| 192.231.221.145.80 2 1 350 0 RST Sun 12/03 13:26:13 tcp 192.168.1.1.4288 <| 192.231.221.145.80 2 1 350 0 RST Sun 12/03 13:26:13 tcp 192.168.1.1.4321 -> 192.231.221.145.80 11 13 350 4499 CLO Sun 12/03 13:26:13 tcp 64.217.248.145.63787 -> 192.231.221.145.80 11 13 350 4499 CLO
I wouldn't worry. As far as I can make out theese are just normal web server type activities (with a dash of ICQ). You can breathe a sigh of relief... Bye, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\\ /__/ / _ \/ // /\ \/ / ICQ# 22219005 _\_v __/_/_//_/\_,_/ /_/\_\