WTF?

[gaf at blu.org (Jerry Feldman)]

That's bizzarre. We do not do portscans from BLU.ORG. There are only 
a small number of people who have access to the blu.org server. 
If this continues, please let me and John know by sending the details to 
officers at blu.org. We have the US Datacenters Megameeting tonight, 
and I will discuss this with John. I won't be able to look at the logs until 
later tonight. 

 
On 6 Jun 2001, at 11:32, Kris_Loranger wrote:

> Why am I being port scanned from the BLU.org box?
> 
> Jun  6 07:26:28 kancer snort[445]: spp_portscan: PORTSCAN DETECTED from
> 216.235.254.230 (STEALTH)
> Jun  6 07:32:19 kancer snort[445]: spp_portscan: portscan status from
> 216.235.254.230: 1 connections across 1 hosts: TCP(1), UDP(0) STEALTH
> Jun  6 07:32:50 kancer snort[445]: spp_portscan: End of portscan from
> 216.235.254.230: TOTAL time(0s) hosts(1) TCP(1) UDP(0) STEALTH
> 
> Not that I care, just wondering if maybe it has been owned or the admin
> is just randomly scanning members?
> 
> 
> -- 
> Kris Loranger
> kris at kancer.978.org
> IRC:irc.978.org,#978,Kancer AIM:KancerKris
> "If you're going to sell out, sell out ethically" -Moby
> 
> -
> Subcription/unsubscription/info requests: send e-mail with
> "subscribe", "unsubscribe", or "info" on the first line of the
> message body to discuss-request at blu.org (Subject line is ignored).


Jerry Feldman <gaf at blu.org>
Associate Director
Boston Linux and Unix user group
http://www.blu.org
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).