Re: [cobalt-users] Raq550: Port Scans - need help

["John D. Gorena" <Support@xxxxxxxxxxxxxxxxxxx>]

Though mine all seem to be written as if they are comming from my server
         My IP/port TO another IP/port
I do not actually know if they are generated from my server or if this is a flaw on how it is
reported.  I have run chkrootkit and all I get is nothing found or port not promisc(?).  From
others, this is normal but I do not know what it actually means either.

My Port Scan summaries are like these.
Log Entry:  eth0:portscan: tcp 65.169.119.101/81 -> 202.77.181.115/41156 52 rst (16)
Log Entry:  eth0:portscan: tcp 65.169.119.101/27374 -> 211.109.196.42/4458 40 rst (16)
Log Entry:  eth0:portscan: tcp 65.169.119.101/6588 -> 152.163.224.70/65179 40 rst (16)
Log Entry:  eth0:portscan: tcp 65.169.119.101/38612 -> 216.62.219.114/25 40 rst (16)

What does this tell you?