catfish.tfproject.org - Tilted Forum Project Discussion Community

bacon_masta · 03-12-2004, 10:55 AM

i'm not exactly sure what the issue is, but i have been recieving 6 or 7 port scans an hour from catfish.tfproject.org. as i am almost 100% sure that no mod or admin would attempt to attack any forum member, what's the issue? is it a security check, or did i do something in the forum to warrant being monitored? here's all the specs my fire wall would pick up (blackice defender 3.5, latest build):

Time, Event, Intruder, Count
3/12/2004 1:50:11 PM, TCP_Port_Scan, catfish.tfproject.org, 2

[Pre-attack Probe] <P>This signature detects when a computer attempts to access more than 4 different TCP ports on the victim's computer.</P> <P>This signature replaces Port_Scan.</P>

IP: 209.50.251.11
DNS: catfish.tfproject.org

so what the hell is going on?

JohnnyRoyale · 03-12-2004, 02:58 PM

You might want to move/repost this in the titled support forum, better chance an admin will catch it...BTW catfish is one of the hostnames for www.tfproject.org.

sailor · 03-12-2004, 05:42 PM

Are you in the IRC chat at the time? Many IRC servers perform similar scans--my firewall goes off with them all the time.

Latch · 03-12-2004, 06:35 PM

Quote:

Originally posted by sailor
Are you in the IRC chat at the time? Many IRC servers perform similar scans--my firewall goes off with them all the time.

I thought that as well, but #TFP is on irvingnet.net, not a TFP server... so I can't imagine it'd be IRC servers doing it.

sailor · 03-12-2004, 09:05 PM

Quote:

Originally posted by Latch
I thought that as well, but #TFP is on irvingnet.net, not a TFP server... so I can't imagine it'd be IRC servers doing it.

Good point. Excuse my lack of mental processes, its been a *wierd* night.

Master Fap · 03-12-2004, 09:15 PM

Quote:

Originally posted by Latch
I thought that as well, but #TFP is on irvingnet.net, not a TFP server... so I can't imagine it'd be IRC servers doing it.

its possible its a TFP bot canning you on IRC and that's their hostname

bacon_masta · 03-13-2004, 12:10 AM

i wasn't logged into irc at all at the time, just recieved a couple of port scans. i tried to scan the ip and couldn't get ANY info back, so i still have no idea what's going on.

Latch · 03-13-2004, 12:48 AM

Maybe you need these guys:

MontanaXVI · 03-13-2004, 11:29 AM

ohh i hear them guys are uber, they can call China from LA for only .25¢

bacon_masta · 03-14-2004, 05:32 AM

still no idea....any mod going to identify my prob?

Cynthetiq · 03-14-2004, 04:05 PM

If you had reported this thread to a moderator like suggested someone would have responded much sooner.

I have forwarded it to the admins.

bacon_masta · 03-20-2004, 01:25 AM

so, i reported it to a mod. as did you. still no response.......

03-12-2004, 10:55 AM	#1 (permalink)
bacon_masta Psycho Location: i live in the state of denial	catfish.tfproject.org i'm not exactly sure what the issue is, but i have been recieving 6 or 7 port scans an hour from catfish.tfproject.org. as i am almost 100% sure that no mod or admin would attempt to attack any forum member, what's the issue? is it a security check, or did i do something in the forum to warrant being monitored? here's all the specs my fire wall would pick up (blackice defender 3.5, latest build): Time, Event, Intruder, Count 3/12/2004 1:50:11 PM, TCP_Port_Scan, catfish.tfproject.org, 2 [Pre-attack Probe] <P>This signature detects when a computer attempts to access more than 4 different TCP ports on the victim's computer.</P> <P>This signature replaces Port_Scan.</P> IP: 209.50.251.11 DNS: catfish.tfproject.org so what the hell is going on?

03-12-2004, 02:58 PM	#2 (permalink)
JohnnyRoyale Psycho Location: Boston, MAss., USA	You might want to move/repost this in the titled support forum, better chance an admin will catch it...BTW catfish is one of the hostnames for www.tfproject.org. __________________ I'm gonna be rich and famous, as soon I invent a device that lets you stab people in the face over the internet.

03-12-2004, 05:42 PM	#3 (permalink)
sailor beauty in the breakdown Location: Chapel Hill, NC	Are you in the IRC chat at the time? Many IRC servers perform similar scans--my firewall goes off with them all the time. __________________ "Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws." --Plato

03-13-2004, 11:29 AM	#9 (permalink)
MontanaXVI Junkie Location: Go A's!!!!	ohh i hear them guys are uber, they can call China from LA for only .25¢ __________________ Spank you very much

03-14-2004, 04:05 PM	#11 (permalink)
Cynthetiq Tilted Cat Head Administrator Location: Manhattan, NY	If you had reported this thread to a moderator like suggested someone would have responded much sooner. I have forwarded it to the admins. __________________ I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not. What's the best nation in the world? DO-NATION!

03-13-2004, 12:10 AM	#7 (permalink)
bacon_masta Psycho Location: i live in the state of denial	i wasn't logged into irc at all at the time, just recieved a couple of port scans. i tried to scan the ip and couldn't get ANY info back, so i still have no idea what's going on.

03-13-2004, 12:48 AM	#8 (permalink)
Latch In Your Dreams Location: City of Lights	Maybe you need these guys:

03-14-2004, 05:32 AM	#10 (permalink)
bacon_masta Psycho Location: i live in the state of denial	still no idea....any mod going to identify my prob?

03-20-2004, 01:25 AM	#12 (permalink)
bacon_masta Psycho Location: i live in the state of denial	so, i reported it to a mod. as did you. still no response.......