what is spamming?

[mjc1]

Hello, as everyone can see I am new to alot of this security stuff...I have mc afee personal firewall and I am running winme operating system....I recently got set up with my cable company and they installed an eathernet? card with a surfboard modem.

Shortly after all of this I started to check my events log and it seems that I am getting probed by my cable (RR) address.

In 3 hours of being online it shows 1168 events most if them show port 68 bootstrap protocol client???

Can anyone tell me what this means? Should I be concerned?
I have reported the events to RR cable and get a email that seems to be generic stating they will investigate...

Is this considered spamming?
Any reply is appreciated
Thanks in Advance
MJC1

[blebs]

Can you post the log or a picture of it for us to see? Spamming is Unsolicited junk email or in cases of spamming this message board, meaningless posting.

[Stu]

The bootstrap protocol is something used in DHCP (Dynamic Host Configuration Protocol--port 68 is the client side), so more likely than not the DHCP server is trying to contact your machine either to ping or update it. This is normal if you do not have a static IP address, so I wouldn't worry about it.

[blebs]

It may be normal, but with 1168 hits in a short amount of time? Something doesn't sound right. That's why I wanted to see the log.

[Stu]

If they are blocking that port with the firewall...it is normal. The DHCP server will keep trying until it gets a response, that's why there are so many hits. They need to allow the DHCP server to connect through the firewall.

[Croc]

Here's a good set of links that will explain about what spamming is all about. (http://www.isoc.org/internet/issues/spamming/)
Logs would be interesting though.
If your IP is static, edit the last set of numbers with xxx's

Have fun.

Croc.

[mjc1]

Date/Time Source IP Host name SPort DPort
2003/02/19 09:50:12 24.92.226.13 nns3-0.nyroc.rr.com 53 2738
2003/02/19 09:50:09 24.92.226.13 nns3-0.nyroc.rr.com 53 2736
2003/02/19 09:48:15 24.92.226.13 nns3-0.nyroc.rr.com 53 2733
2003/02/19 06:15:27 24.92.226.13 nns3-0.nyroc.rr.com 53 2166
2003/02/19 06:17:52 24.92.226.13 nns3-0.nyroc.rr.com 53 2173
2003/02/19 06:20:59 24.92.226.13 nns3-0.nyroc.rr.com 53 2187
2003/02/19 06:21:02 24.92.226.13 nns3-0.nyroc.rr.com 53 2189
2003/02/19 06:21:03 24.92.226.13 nns3-0.nyroc.rr.com 53 2193
2003/02/19 06:21:04 24.92.226.13 nns3-0.nyroc.rr.com 53 2195
2003/02/19 06:21:04 24.92.226.13 nns3-0.nyroc.rr.com 53 2196
2003/02/19 06:21:06 205.188.165.185 ads.web.aol.com 80 2202
2003/02/19 06:21:06 205.188.165.185 ads.web.aol.com 80 2204
2003/02/19 06:21:29 24.92.226.13 nns3-0.nyroc.rr.com 53 2247
2003/02/19 06:21:31 24.92.226.13 nns3-0.nyroc.rr.com 53 2249
2003/02/19 06:21:35 24.92.226.13 nns3-0.nyroc.rr.com 53 2253
2003/02/19 06:21:36 24.92.226.13 nns3-0.nyroc.rr.com 53 2254
2003/02/19 06:21:38 24.92.226.13 nns3-0.nyroc.rr.com 53 2260
2003/02/19 06:21:40 24.92.226.13 nns3-0.nyroc.rr.com 53 2263
2003/02/19 06:21:48 24.92.226.13 nns3-0.nyroc.rr.com 53 2270
2003/02/19 06:21:53 24.92.226.13 nns3-0.nyroc.rr.com 53 2273
2003/02/19 06:21:56 24.92.226.13 nns3-0.nyroc.rr.com 53 2276
2003/02/19 06:21:57 205.188.165.185 ads.web.aol.com 80 2202
2003/02/19 06:21:57 205.188.165.185 ads.web.aol.com 80 2204
2003/02/19 06:21:57 24.92.226.13 nns3-0.nyroc.rr.com 53 2275
2003/02/19 06:22:01 24.92.226.13 nns3-0.nyroc.rr.com 53 2280
2003/02/19 06:28:58 24.92.226.13 nns3-0.nyroc.rr.com 53 2307
2003/02/19 06:30:23 205.188.165.185 ads.web.aol.com 80 2316
2003/02/19 06:30:24 205.188.165.185 ads.web.aol.com 80 2317
2003/02/19 06:31:18 205.188.165.185 ads.web.aol.com 80 2316
2003/02/19 06:31:19 205.188.165.185 ads.web.aol.com 80 2317
2003/02/19 06:47:55 24.92.226.13 nns3-0.nyroc.rr.com 53 2330
2003/02/19 07:17:58 24.92.226.13 nns3-0.nyroc.rr.com 53 2332
2003/02/19 07:19:04 24.92.226.13 nns3-0.nyroc.rr.com 53 2334
2003/02/19 07:19:31 24.92.226.13 nns3-0.nyroc.rr.com 53 2336
2003/02/19 07:48:01 24.92.226.13 nns3-0.nyroc.rr.com 53 2353
2003/02/19 08:18:04 24.92.226.13 nns3-0.nyroc.rr.com 53 2355
2003/02/19 08:48:07 24.92.226.13 nns3-0.nyroc.rr.com 53 2357
2003/02/19 09:18:10 24.92.226.13 nns3-0.nyroc.rr.com 53 2365
2003/02/19 09:32:57 24.92.226.13 nns3-0.nyroc.rr.com 53 2380
2003/02/19 09:33:16 24.92.226.13 nns3-0.nyroc.rr.com 53 2383
2003/02/19 09:33:17 24.92.226.13 nns3-0.nyroc.rr.com 53 2385
2003/02/19 09:33:22 24.92.226.13 nns3-0.nyroc.rr.com 53 2389
2003/02/19 09:33:23 24.92.226.13 nns3-0.nyroc.rr.com 53 2390
2003/02/19 09:33:30 24.92.226.13 nns3-0.nyroc.rr.com 53 2396
2003/02/19 09:33:33 24.92.226.13 nns3-0.nyroc.rr.com 53 2398
2003/02/19 09:33:44 24.92.226.13 nns3-0.nyroc.rr.com 53 2406
2003/02/19 09:34:24 24.92.226.13 nns3-0.nyroc.rr.com 53 2409
2003/02/19 09:34:27 24.92.226.13 nns3-0.nyroc.rr.com 53 2411
2003/02/19 09:34:30 24.92.226.13 nns3-0.nyroc.rr.com 53 2426
2003/02/19 09:34:30 24.92.226.13 nns3-0.nyroc.rr.com 53 2431
2003/02/19 09:34:30 24.92.226.13 nns3-0.nyroc.rr.com 53 2437
2003/02/19 09:34:34 24.92.226.13 nns3-0.nyroc.rr.com 53 2462
2003/02/19 09:34:40 24.92.226.13 nns3-0.nyroc.rr.com 53 2496
2003/02/19 09:35:18 24.92.226.13 nns3-0.nyroc.rr.com 53 2506
2003/02/19 09:35:25 24.92.226.13 nns3-0.nyroc.rr.com 53 2518
2003/02/19 09:35:28 24.92.226.13 nns3-0.nyroc.rr.com 53 2520
2003/02/19 09:35:30 24.92.226.13 nns3-0.nyroc.rr.com 53 2522
2003/02/19 09:35:34 24.92.226.13 nns3-0.nyroc.rr.com 53 2526
2003/02/19 09:35:41 24.92.226.13 nns3-0.nyroc.rr.com 53 2533
2003/02/19 09:35:44 24.92.226.13 nns3-0.nyroc.rr.com 53 2535
2003/02/19 09:37:41 24.92.226.13 nns3-0.nyroc.rr.com 53 2588
2003/02/19 09:37:57 24.92.226.13 nns3-0.nyroc.rr.com 53 2599
2003/02/19 09:38:12 24.92.226.13 nns3-0.nyroc.rr.com 53 2603
2003/02/19 09:38:15 24.92.226.13 nns3-0.nyroc.rr.com 53 2607
2003/02/19 09:38:18 24.92.226.13 nns3-0.nyroc.rr.com 53 2609
2003/02/19 09:38:39 24.92.226.13 nns3-0.nyroc.rr.com 53 2633
2003/02/19 09:38:59 24.92.226.13 nns3-0.nyroc.rr.com 53 2640
2003/02/19 09:39:03 24.92.226.13 nns3-0.nyroc.rr.com 53 2642
2003/02/19 09:39:06 24.92.226.13 nns3-0.nyroc.rr.com 53 2646
2003/02/19 09:39:09 24.92.226.13 nns3-0.nyroc.rr.com 53 2648
2003/02/19 09:39:10 24.92.226.13 nns3-0.nyroc.rr.com 53 2649
2003/02/19 09:39:10 24.92.226.13 nns3-0.nyroc.rr.com 53 2650
2003/02/19 09:39:37 24.92.226.13 nns3-0.nyroc.rr.com 53 2658
2003/02/19 09:39:38 24.92.226.13 nns3-0.nyroc.rr.com 53 2659
2003/02/19 09:39:41 24.92.226.13 nns3-0.nyroc.rr.com 53 2662
2003/02/19 09:39:44 24.92.226.13 nns3-0.nyroc.rr.com 53 2664
2003/02/19 09:42:13 24.92.226.13 nns3-0.nyroc.rr.com 53 2666
2003/02/19 09:42:17 24.92.226.13 nns3-0.nyroc.rr.com 53 2669
2003/02/19 09:42:18 24.92.226.13 nns3-0.nyroc.rr.com 53 2670
2003/02/19 09:43:33 24.92.226.13 nns3-0.nyroc.rr.com 53 2673
2003/02/19 09:43:36 24.92.226.13 nns3-0.nyroc.rr.com 53 2675
2003/02/19 09:43:52 24.92.226.13 nns3-0.nyroc.rr.com 53 2680
2003/02/19 09:43:53 24.92.226.13 nns3-0.nyroc.rr.com 53 2681
2003/02/19 09:43:53 24.92.226.13 nns3-0.nyroc.rr.com 53 2682
2003/02/19 09:43:55 24.92.226.13 nns3-0.nyroc.rr.com 53 2684
2003/02/19 09:44:00 24.92.226.13 nns3-0.nyroc.rr.com 53 2690
2003/02/19 09:44:03 24.92.226.13 nns3-0.nyroc.rr.com 53 2693
2003/02/19 09:44:06 24.92.226.13 nns3-0.nyroc.rr.com 53 2695
2003/02/19 09:44:07 24.92.226.13 nns3-0.nyroc.rr.com 53 2698
2003/02/19 09:46:09 24.92.226.13 nns3-0.nyroc.rr.com 53 2720
2003/02/19 09:47:06 24.92.226.13 nns3-0.nyroc.rr.com 53 2723
2003/02/19 09:47:10 24.92.226.13 nns3-0.nyroc.rr.com 53 2725
2003/02/19 09:47:43 24.92.226.13 nns3-0.nyroc.rr.com 53 2729
2003/02/19 09:47:46 24.92.226.13 nns3-0.nyroc.rr.com 0 0
2003/02/19 09:47:58 24.92.226.13 nns3-0.nyroc.rr.com 53 2730
2003/02/19 09:48:01 24.92.226.13 nns3-0.nyroc.rr.com 53 2732

I dont know if this helps...I was trying to somehow copy it better but this is just from this morning...let me know
thankyou
MJC1

[Croc]

I don't see anything like this so it's a stab only. Corrections from anyone welcome.

The nns3-0.nyroc.rr.com xx xxxxx entries are your ISP trying to maintain a connection
The ads.web.aol.com xx xxxx are from loaded banner advertising from AOL cause you use it (?)

If you allowed these to proceed they won't be a problem.
Maybe someone will come along with the way to do this if you need the guidance.
Hope it helped.

Croc.

[blebs]

Looks to be normal traffic from your computer to the other ports. I wouldn't worry about those. I might take a second look if I start seeing a reversal and seeing things trying to come into port 53, but what you have there is outgoing traffic. I think someone else should comment also.