[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Somebody's scanning my ports or what?



Why don't you use ipfwadm?? I got almost the same problem... 

Type man ipfwadm

Regards,

Anderson


At 21:38 27/04/99 -0400, Benoit.Joly wrote:
>im getting this kind of things about 2 or 3 times a week...
>with some netbus and bo try.
>
>i sent lot of emails to their isp but still receive 2 or 3 attack per 
>week from other ips...
>
>what should i do?, is there a way to protect me against this? currently i 
>have fakebo.
>
>Benoit Joly
>
>On 27 Apr 1999, Arcady Genkin wrote:
>
>> Hi all:
>> 
>> To continue my new Linux user paranoia, I have just noticed in
>> xconsole that someone's been trying to connect to every port from port 
>> 2 thru 1024. It looks like this:
>> 
>> Apr 27 20:03:09 main tcplogd: tcpmux connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 2 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 3 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 4 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> ...
>> ...
>> Apr 27 20:08:13 main tcplogd: port 1024 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> 
>> This one was the last. Bellglobal is my ISP provider, and I'm
>> connected via ADSL modem. In between these messages sometimes there
>> are the following (I guess that's when existing service was found):
>> 
>> Apr 27 20:03:46 main in.telnetd[7141]: connect from cpu.adsl.bellglobal.com
>> Apr 27 20:04:34 main in.ftpd[7145]: connect from cpu.adsl.bellglobal.com
>> 
>> Is this within frames of acceptable. I feel like complaining, but
>> don't want to look like an idiot. :)
>> 
>> Any comments highly appreciated!
>> -- 
>> Arcady Genkin
>> "I opened up my wallet, and it's full of blood..." - GsYDE
>> 
>> 
>> -- 
>> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org <
/dev/null
>> 
>> 
>
>
>-- 
>Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org <
/dev/null
>
>
>
>


Reply to: