Re: Somebody's scanning my ports or what?
im getting this kind of things about 2 or 3 times a week...
with some netbus and bo try.
i sent lot of emails to their isp but still receive 2 or 3 attack per
week from other ips...
what should i do?, is there a way to protect me against this? currently i
have fakebo.
Benoit Joly
On 27 Apr 1999, Arcady Genkin wrote:
> Hi all:
>
> To continue my new Linux user paranoia, I have just noticed in
> xconsole that someone's been trying to connect to every port from port
> 2 thru 1024. It looks like this:
>
> Apr 27 20:03:09 main tcplogd: tcpmux connection attempt from unknown@cpu.adsl.bellglobal.com [206.47.37.4]
> Apr 27 20:03:09 main tcplogd: port 2 connection attempt from unknown@cpu.adsl.bellglobal.com [206.47.37.4]
> Apr 27 20:03:09 main tcplogd: port 3 connection attempt from unknown@cpu.adsl.bellglobal.com [206.47.37.4]
> Apr 27 20:03:09 main tcplogd: port 4 connection attempt from unknown@cpu.adsl.bellglobal.com [206.47.37.4]
> ...
> ...
> Apr 27 20:08:13 main tcplogd: port 1024 connection attempt from unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>
> This one was the last. Bellglobal is my ISP provider, and I'm
> connected via ADSL modem. In between these messages sometimes there
> are the following (I guess that's when existing service was found):
>
> Apr 27 20:03:46 main in.telnetd[7141]: connect from cpu.adsl.bellglobal.com
> Apr 27 20:04:34 main in.ftpd[7145]: connect from cpu.adsl.bellglobal.com
>
> Is this within frames of acceptable. I feel like complaining, but
> don't want to look like an idiot. :)
>
> Any comments highly appreciated!
> --
> Arcady Genkin
> "I opened up my wallet, and it's full of blood..." - GsYDE
>
>
> --
> Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
>
>
Reply to: