Re: What does this indicate? (LONG)

From: Paul (paul.rankine@blueyonder.co.uk)
Date: 12/18/01


From: "Paul" <paul.rankine@blueyonder.co.uk>
Date: Tue, 18 Dec 2001 02:42:16 GMT

Not a lot to worry about. FTP File Transfer Protocol (FTP) A client-server
protocol which allows a user on one computer to transfer files to and from
another computer over a TCP/IP network. Also the client program the user
executes to transfer files. It is defined in STD 9, RFC 959.
See also anonymous FTP, FSP, TFTP.

Regards Paul

"sierra1996" <sierra1996AQHA@adelphia.net> wrote in message
news:1mgs1usgb7fpn4229m3mp5ia7frd5seojv@4ax.com...
> Hello to all!
>
> I have been using ZA for a while now. I have a cable modem &
> a static IP address (I'm not sure if all cable hook-ups have static
> IP's, so I figured I had better give as much relevant information as I
> could). I get daily alerts re. TONS of blocked access to various
> different ports, as well as HTTP, FTP, UDP, IGMP, DHCP, ICMP, etc.
> blocks.
>
> I have researched what each of these abbreviations mean & I
> have also researched what some of the various different ports are used
> for. While I understand the port numbers & (for the most part) what
> they are used for...I have not been able to make a whole bunch of
> sense out of the above abbreviations (what these protocols are used
> for/what's their significance?).
>
> I became concerned today when something different popped up on
> ZA's alert message. Someone from Korea has been trying to access my
> computer (FTP). Today...I received this alert & was concerned, as it
> looked different from all of the others:
>
> The firewall has blocked Internet access to your computer (TCP Port
> 6112) from 210.115.119.14 (FTP Data) [TCP Flags: S].
>
> Time: 12/17/01 1:27:48 PM
>
> I have never seen the words: 'FTP Data' before. I do not
> understand what this means. So...I went to SamSpade & looked up the
> IP address. The above IP is from Korea. Next, I did a netstat a...I
> always have only one port listening, which is my news server. This
> time, the results were...
>
> TCP 1244 aim1.radiate.com:1975 TIME_WAIT
>
> TCP 1202 0.0.0.0:0 LISTENING
> UDP 1202 *:*
>
> Then...a short while later, I did another netstat a & got
> this...
>
> 206.65.183.125:80 TIME_WAIT
>
> I have never seen these before & I do not understand their
> significance. Should I be concerned?
>
> I must include, while all of this was occurring, I had
> recently D/L'ed McAfee's latest DAT's, installed them & was scanning
> my files. I do not know if this is relevant. Again...I wanted to
> include as much information as I could.
>
> If there is anyone here who would care to help me...I would
> greatly appreciate the assistance. If I need to be directed elsewhere
> (to another NG), please forgive the long post & let me know. Thank
> you!
>
> Happy Holidays to all!
>
> Sierra.
>



Relevant Pages

  • Re: FTP Access ISA Server
    ... To allow the ISA server to download some stuff via FTP protocol, ... Local port: Dynamic ... My virus definitions come in via a FTP download. ...
    (microsoft.public.isa)
  • Re: speed issues
    ... that DC clients use to transfer files. ... > These tend to be a result of a port scan. ... > protocol is trying to connect to a closed port initially and then ...
    (freebsd-questions)
  • Re: ISA 2004 and FTP problems - Problem Fixed after much trial and error
    ... FTP application filter, without adding port 20 to the protocol ... originates from port 20 on server, and goes to a high-port on the client... ...
    (microsoft.public.isaserver)
  • Re: ssh / scp to server from vb6 ?
    ... being able to use secure FTP port, which I think is the port 22 above, ... commands are available for the SCP protocol. ... "Jim Carlock" wrote in message ... FTP is kinda slow at doing transfers and everything about is plain ...
    (microsoft.public.vb.general.discussion)
  • Re: What does this indicate? (LONG)
    ... I suspect that someone was port ... A normal TCP conversation consists of a three packet handshake before any ... FTP File Transfer Protocol A client-server ... > protocol which allows a user on one computer to transfer files to and from ...
    (comp.security.firewalls)