[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Raq550: Port Scans - need help



I know that I have asked this before but the info does not make sense to me.  Maybe one of you
Raq550 owners can shed some light on this subject.

I get the following and according to the message it looks like the scan comes from my system going
out (outbound).  Do other owners see this?

This alert notification is to inform you of network activity occurring on your host.
           Timestamp:  Thu 12 Dec 2002 03:22:47 AM CST
          Alert Type:  Port Scan Detected
           Interface:  eth0
            Protocol:  tcp
 Packet Size (bytes):  40
      Source Address:  65.169.119.101
         Source port:  27374
           Direction:  outbound
 Destination Address:  211.215.42.85
    Destination Port:  2021
           Log Entry:  eth0:portscan: tcp 65.169.119.101/27374 -> 211.215.42.85/2021 40 rst (16)