said by wayjac:Go to this portscan website or one you use
»
www.t1shopper.com/tools/ ··· scanner/Use the domain name instead of the ip address
Use the portscanner webpage to scan ports 25, 80, 110 and 123
Then look at the event log there will be messages with the portscanning website's ip address src=208.64.252.230
Scanning ports on time.shatteredtears.com
time.shatteredtears.com isn't responding on port 25 (smtp).
time.shatteredtears.com isn't responding on port 80 (http).
time.shatteredtears.com isn't responding on port 110 (pop3).
time.shatteredtears.com isn't responding on port 123 (ntp).
INF 2009-02-20T16:43:09-08:00 fw,fwmon: src=208.64.252.230 dst=99.23.106.36 ipprot=6 sport=57962 dport=25 OPEN Passed
INF 2009-02-20T16:43:11-08:00 fw,fwmon: src=208.64.252.230 dst=99.23.106.36 ipprot=6 sport=36387 dport=80 OPEN Passed
INF 2009-02-20T16:43:12-08:00 fw,fwmon: src=91.8.72.106 dst=99.23.106.36 ipprot=6 sport=1076 dport=58841 Host Unreachable, Packet Dropped
INF 2009-02-20T16:43:12-08:00 fw,fwmon: src=87.219.52.69 dst=99.23.106.36 ipprot=6 sport=1568 dport=58841 Host Unreachable, Packet Dropped
INF 2009-02-20T16:43:12-08:00 fw,fwmon: src=208.64.252.230 dst=99.23.106.36 ipprot=6 sport=57962 dport=25 Host Unreachable, Packet Dropped
INF 2009-02-20T16:43:12-08:00 fw,fwmon: src=72.84.44.200 dst=99.23.106.36 ipprot=6 sport=50079 dport=58841 Host Unreachable, Packet Dropped
INF 2009-02-20T16:43:13-08:00 fw,fwmon: src=94.41.32.170 dst=99.23.106.36 ipprot=17 sport=57646 dport=58841 UDP Split Session Created, Packet Passed
INF 2009-02-20T16:43:13-08:00 fw,fwmon: src=208.64.252.230 dst=99.23.106.36 ipprot=6 sport=47650 dport=110 OPEN Passed
INF 2009-02-20T16:43:14-08:00 fw,fwmon: src=192.168.1.65 dst=90.229.141.217 ipprot=6 sport=4633 dport=13557 New Session, Packet Passed
INF 2009-02-20T16:43:14-08:00 fw,fwmon: src=77.240.96.126 dst=99.23.106.36 ipprot=6 sport=1807 dport=58841 OPEN Passed
INF 2009-02-20T16:43:15-08:00 fw,fwmon: src=208.64.252.230 dst=99.23.106.36 ipprot=6 sport=35595 dport=123 OPEN Passed
