Re: Receiving constant hits from random hosts

From: Manfred BERTL (mailinglist@edv-bertl.de)
Date: 07/09/02


From: Manfred BERTL <mailinglist@edv-bertl.de>
To: focus-linux@securityfocus.com
Date: 09 Jul 2002 09:01:10 +0200


>
> I get this above scan, along with scans on default 1080/3128(or whatever
> squids port is), and all of these are hourly, almost as if someone has
> setup a cron job to scan my system on the hour each hour. Is this
> normal? I've never seen it so prevelant in my system logs, so I figured
> I'd post. Any ideas or comments would be greatly appreciated.

i guess, you have a irc-client running. it is usual from irc-servers, to
scan your client for open proxies. if there is an open proxy, the irc
server wont let you stay on irc.

kind regards,
fred