Re: Somebody's scanning my ports or what?
Why don't you use ipfwadm?? I got almost the same problem...
Type man ipfwadm
Regards,
Anderson
At 21:38 27/04/99 -0400, Benoit.Joly wrote:
>im getting this kind of things about 2 or 3 times a week...
>with some netbus and bo try.
>
>i sent lot of emails to their isp but still receive 2 or 3 attack per
>week from other ips...
>
>what should i do?, is there a way to protect me against this? currently i
>have fakebo.
>
>Benoit Joly
>
>On 27 Apr 1999, Arcady Genkin wrote:
>
>> Hi all:
>>
>> To continue my new Linux user paranoia, I have just noticed in
>> xconsole that someone's been trying to connect to every port from port
>> 2 thru 1024. It looks like this:
>>
>> Apr 27 20:03:09 main tcplogd: tcpmux connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 2 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 3 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> Apr 27 20:03:09 main tcplogd: port 4 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>> ...
>> ...
>> Apr 27 20:08:13 main tcplogd: port 1024 connection attempt from
unknown@cpu.adsl.bellglobal.com [206.47.37.4]
>>
>> This one was the last. Bellglobal is my ISP provider, and I'm
>> connected via ADSL modem. In between these messages sometimes there
>> are the following (I guess that's when existing service was found):
>>
>> Apr 27 20:03:46 main in.telnetd[7141]: connect from cpu.adsl.bellglobal.com
>> Apr 27 20:04:34 main in.ftpd[7145]: connect from cpu.adsl.bellglobal.com
>>
>> Is this within frames of acceptable. I feel like complaining, but
>> don't want to look like an idiot. :)
>>
>> Any comments highly appreciated!
>> --
>> Arcady Genkin
>> "I opened up my wallet, and it's full of blood..." - GsYDE
>>
>>
>> --
>> Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org <
/dev/null
>>
>>
>
>
>--
>Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org <
/dev/null
>
>
>
>
Reply to: