On Friday 18 April 2003 21:06, Adam Leach wrote:
Hi, Someone is port scanning every single port on my machine, here are a few examples. I run SuSE Linux 8.1, and the firewall is dropping most of the attempts.
Apr 18 19:28:59 dev kernel: SuSE-FW-DROP-DEFAULT IN=eth0 OUT= MAC=00:01:02:15:4f:e5:00:09:b6:6b:84:8c:08:00 SRC=195.86.128.45 DST=81.99.191.85 LEN=40 TOS=0x00 PREC=0x00 TTL=28 ID=3621 PROTO=TCP SPT=56637 DPT=17319 WINDOW=2048 RES=0x00 SYN URGP=0
Apr 18 19:28:59 dev kernel: SuSE-FW-DROP-DEFAULT IN=eth0 OUT= MAC=00:01:02:15:4f:e5:00:09:b6:6b:84:8c:08:00 SRC=195.86.128.45 DST=81.99.191.85 LEN=40 TOS=0x00 PREC=0x00 TTL=28 ID=22532 PROTO=TCP SPT=56637 DPT=13501 WINDOW=2048 RES=0x00 SYN URGP=0
Is there anything I can easily do to stop it.
Probably not, if you don't know who "someone" is. Keep using your firewall and avoid having ports open. -- Ch