Thread: Port scan attack
12-30-2003, 05:54 PM #1
Port scan attack
My McAfee firewall keeps showing this thing called a "port scan attack", What the hell is it?
I can trace it, but I have know idea what it means. I do a ping or something?
12-31-2003, 08:16 AM #2
It is people trying to scan your ports looking for vounerabilities or open ports. That is how you get hacked. It happens all the time though so as long as you have a tight ship you should be alright.
12-31-2003, 08:40 AM #3
What does the trace do? the ping?
01-03-2004, 02:50 AM #4Originally Posted by Jdawg50
A ping is used to test routed ip connections. It works at layer 3, the network layer of the OSI network model. It will send a packet of data to a specified host and wait for a reply. Some people might use this to see if a computer is online so they can start port scanning or check for connectivity.
If you are truly worried about the port scan/scans save the port scan logs and send them to your ISP. I wouldn't be real worried about it so long as your anti-virus is up to date and your firewall is running. Unless the same ip is scanning all the time or you see a pattern with the scans I wouldn't worry. Port scanning is very common and in fact legal. If the attacker tries to connect to the open port, and gain access then he is breaking the law.
Last edited by CarbonCopy; 01-03-2004 at 02:53 AM.
01-04-2004, 06:04 PM #5Originally Posted by CarbonCopy
If you need help tracking down the ISP just find the IP number that the guy is using, go to www.samspade.org and plug that number into IP Address and it will do a reverse DNS for you.
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)