Mailinglist Archive: opensuse-security (465 mails)

< Previous Next >
port 445
  • From: "spiekey" <spiekey@xxxxxxxxxxx>
  • Date: Mon, 3 Dec 2001 09:20:13 +0100
  • Message-id: <LAW2-OE39DIjlkPi4eH00004af9@xxxxxxxxxxx>
Hello!

I am using logcheck and portsentry.
I read that port 445 is something from smb and not really a reason to worry
about, but well, its a external ip which wanted to "do" something.
Something to worry about?

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Dec 3 01:43:47 suse portsentry[5576]: attackalert: TCP SYN/Normal scan from
host: pD951A6F2.dip.t-dialin.net/217.81.166.242 to TCP port: 445
Dec 3 01:43:47 suse portsentry[5576]: attackalert: Host 217.81.166.242 has
been blocked via wrappers with string: "ALL: 217.81.166.242"

Thanks!
Spiekey


< Previous Next >