[cobalt-users] "Port Scan Detected " repeated intrusion. On Raq 550

["Tunc Eresen\(?`..,,.-> Cobalt M447785363481 " <tunceresen@xxxxxxxxxx>]

Hello, All

10/19/03-16:17:43 eth0:denied: udp my.ip.range.com/33436 <-
136.1.1.100/11935 32 !pass (567)
How could I deal with this?  

IP  136.1.1.100 "Port Scan Detected" giving this message and IP block is on
and this IP address is on the blocked list  

"This alert notification is to inform you of network activity occurring on
your host.

           Timestamp:  Sun 19 Oct 2003 09:02:08 AM BST
          Alert Type:  Port Scan Detected
           Interface:  eth0
            Protocol:  3/3/icmp
 Packet Size (bytes):  60

      Source Address:  my.ip.range.com
         Source port:  
           Direction:  outbound
 Destination Address:  136.1.1.100
    Destination Port:  

           Log Entry:  eth0:portscan: 3/3/icmp my.ip.range.com ->
136.1.1.100 60 (626)"

Best Regards, 

O. TUNC ERESEN

NT & Security Consultant.

Mobile: (44)07785 363 481

17 OAK ROAD, BRACKLEY, NORTHANTS, UK, NN13 6ER

tunc@xxxxxxxxxx

www.eresen.com

eresen@xxxxxxxxxxx (MSN Messenger service)

eutsl@xxxxxxxxx (Yahoo Messenger service)

The information contained in this email and any attachment is confidential.
It is intended only for the named addressee's. If you are not the named
addressee please notify the sender immediately and do not disclose, copy or
distribute the contents to any other person other than the intended
addressee's.. If you have received this transmission in error it would be
helpful if you could notify tunc@xxxxxxxxxx as soon as possible.


-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of alex
Sent: 18 October 2003 23:10
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] HELP MAIL - raq550

thanks

----- Original Message -----
From: "Gerald Waugh" <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Saturday, October 18, 2003 7:56 PM
Subject: Re: [cobalt-users] HELP MAIL - raq550


> On Sat, 18 Oct 2003, alex wrote:
> 
> > I'm working behind a firewall, may be this the problem.
> 
> Is your reverse lookup fixed?
> If not a firewall is the least of your problems.
> 
> Gerald
> --
> http://frontstreetnetworks.com | http://store.raqware.com
>   Front Street Networks LLC, 229 Front Street, Ste.#C
>   New Haven, CT 06513-3203 | phone: +1-203-785-0699
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.





-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.