[Dshield] What is my ISP doing?

Paul Marsh pmarsh at nmefdn.org
Fri Apr 9 12:29:23 GMT 2004


Steve:

	Looks like RR scanning for open relays.  I can't find it right
now but somewhere on there site is a page detailing why they're doing
it.

Thanx, Paul 

> -----Original Message-----
> From: Steve [mailto:itmanager at rjl-pensions.com] 
> Sent: Friday, April 09, 2004 12:37 AM
> To: 'General DShield Discussion List'
> Subject: [Dshield] What is my ISP doing? 
> 
> I recently have been receiving certain incoming probes from 
> my ISP, or what I think is my ISP, RoadRunner.
> 
> Can anyone help me understand this?
> 
> Thanks.
> 
> 
> Steve
> 
> 
> Here is a sample incase the .txt file doesn't go through.
> 
> 
> 
> Date      	Time       	Dir	Rem IP Addr    	Remote Name
> R Port	Lcl IP Addr    	L Port
> 2004/04/09	00:28:13   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1863  	24.161.228.  	80    
> 2004/04/09	00:28:13   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1852  	24.161.228.  	1025  
> 2004/04/09	00:28:13   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1857  	24.161.228.  	3127  
> 2004/04/09	00:28:13   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1858  	24.161.228.  	6129  
> 2004/04/09	00:28:13   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1850  	24.161.228.  	2745  
> 2004/04/09	00:28:07   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1863  	24.161.228.  	80    
> 2004/04/09	00:28:07   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1852  	24.161.228.  	1025  
> 2004/04/09	00:28:07   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1857  	24.161.228.  	3127  
> 2004/04/09	00:28:07   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1858  	24.161.228.  	6129  
> 2004/04/09	00:28:07   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1850  	24.161.228.  	2745  
> 2004/04/09	00:28:04   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1863  	24.161.228.  	80    
> 2004/04/09	00:28:04   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1858  	24.161.228.  	6129  
> 2004/04/09	00:28:04   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1857  	24.161.228.  	3127  
> 2004/04/09	00:28:04   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1852  	24.161.228.  	1025  
> 2004/04/09	00:28:04   	I  	24.210.214.179
> dhcp024-210-214-179.woh.rr.com     	1850  	24.161.228.  	2745  
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.651 / Virus Database: 417 - Release Date: 04/05/2004
>  
>   
> 



More information about the list mailing list