[cobalt-developers] Outbound Port Scan

[Raq Admin]

We have had inbound port scans, but this is the first outbound I have received.

How does an outbound happen?  This machine hosts only our web sites.

           Timestamp:  Fri 18 Jul 2003 04:04:11 AM PDT
          Alert Type:  Port Scan Detected
           Interface:  eth0
            Protocol:  tcp
 Packet Size (bytes):  40
      Source Address:  xxx.xxx.xxx.xxx
         Source port:  445
           Direction:  outbound
 Destination Address:  140.109.34.14
    Destination Port:  3519
           Log Entry:  eth0:portscan: tcp xxx.xxx.xxx.xxx/445 -> 
140.109.34.14/3519 40 rst (16)

_______________________________________________
cobalt-developers mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-developers