[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-developers] Outbound Port Scan
- Subject: [cobalt-developers] Outbound Port Scan
- From: Raq Admin <raq@xxxxxxxxxxxxx>
- Date: Fri Jul 18 07:21:00 2003
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
We have had inbound port scans, but this is the first outbound I have received.
How does an outbound happen? This machine hosts only our web sites.
Timestamp: Fri 18 Jul 2003 04:04:11 AM PDT
Alert Type: Port Scan Detected
Interface: eth0
Protocol: tcp
Packet Size (bytes): 40
Source Address: xxx.xxx.xxx.xxx
Source port: 445
Direction: outbound
Destination Address: 140.109.34.14
Destination Port: 3519
Log Entry: eth0:portscan: tcp xxx.xxx.xxx.xxx/445 ->
140.109.34.14/3519 40 rst (16)