My firewall keeps intercepting syn port scans from usually the same ip address. Is this a normal occurance when your online? I dont usually use an aftermarket firewall, most of the time i just go with the one that come with XP so i dont get this info. Anyways this seems funny to me because it will usually happen with several scans within a short peroid of time. I am running a fresh OS install virus free so far & i havent really got any traffic uploading or downloading, but i just got hit with several scans,somtimes they are to the point of penetrating my firewall.

216.78.87.68 is the last address that scanned me. If anyone can help me out with any advice i would be gratful.

I dont know what all the shit mean when you put it thru here, but someone might tell you.

http://www-networks.its.unimelb.edu.au/cgi-bin/nph-tr1.cgi

what firewall are you using thats showing the IPs that are scanning you? Sounds like BlackICE or something... but typically these things aren't anything to worry about... usually some kids scanning a range of IPs that you happen to be in looking for trojans or somethign to connect to. Some firewalls allow you to ban IPs n' such, i would look into a more professional firewall if your a net junky. The firewall built into XP concentrate of outgoing traffic mostly anyways so its pretty much crap, again Bill Gates has only givin you half a cookie.

[This message has been edited by Turbo_A (edited 12-16-2004).]

quote:Originally posted by Lysergamideman:

My firewall keeps intercepting syn port scans from usually the same ip address. Is this a normal occurance when your online? I dont usually use an aftermarket firewall, most of the time i just go with the one that come with XP so i dont get this info. Anyways this seems funny to me because it will usually happen with several scans within a short peroid of time. I am running a fresh OS install virus free so far & i havent really got any traffic uploading or downloading, but i just got hit with several scans,somtimes they are to the point of penetrating my firewall.

216.78.87.68 is the last address that scanned me. If anyone can help me out with any advice i would be gratful.

Hehe. ^_^

i get the same thing all the time. piises me off. and i use sygate personal firewall if that helps!!

^ i use sygate and that works real good-- shows connecting ip's and port scans and blocks everything you tell it to but the goddamn -bling- sound it always makes drives me fuckin nuts- 057

sh-2.05b$ whois 216.78.87.68

[...]

OrgAbuseHandle: ABUSE81-ARIN

OrgAbuseName: Abuse Group

OrgAbusePhone: +1-404-499-5224

OrgAbuseEmail: abuse@bellsouth.net

[...]

------------------------------------------

Happy?

[This message has been edited by edf825 (edited 12-17-2004).]

quote:Originally posted by edf825:



Comment: For Abuse Issues, email abuse@bellsouth.net. NO ATTACHMENTS. Include IP

Comment: address, time/date, message header, and attack logs.



<edit>So can we all save the mods some time and delete the IP addresses?

[This message has been edited by TuxRox (edited 12-17-2004).]