Re: Port Scans coming from my IP

From: Maxime Ducharme (maxime_at_pandore-designSPAMISBAD.com)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 11:02:55 -0500

You may run Ethereal do know when the scan happens
www.ethereal.com

and check which process is causing this via TCPView
http://www.sysinternals.com/ntw2k/source/tcpview.shtml

Ciao

---------------------------------------------------------------
  Maxime Ducharme
  Administrateur reseau, Programmeur

"Rollin 4 Eva" <test@test.com> wrote in message
news:FfudnauAseNmYAKiRVn-gQ@giganews.com...
> I work as an ASP programmer working at a small company. The hosting
company
> I work with has Black Ice Server on their servers and apparently there are
> port scans on the server originating from my IP address here at work. I
> don't know what else I can do to prevent my system from being compromised.
> We don't have a hardware firewall at work so I use Sygate Personal
Firewall
> on my Windows 2003 Server box. I've got Norton Antivirus scheduled to
> update virus definitions and scan daily on my box. I don't know what else
I
> can do to secure my machine. Are there any special configurations in
Sygate
> I can make to lock it down further. Any help/advice is appreciated.
> Thanks.
>
> Rollin
>
>

Relevant Pages

  • Re: Which application is associated with an open port?
    ... Maxime Ducharme ... Administrateur reseau, Programmeur ... > My apologies if this is the wrong group to post this question: ...
    (comp.security.firewalls)
  • Re: Weird mail trying top get "a.cgi", any ideas ?
    ... Maxime Ducharme ... Administrateur reseau, Programmeur ... >> Try this info, symantec found it yesterday. ...
    (alt.computer.security)
  • [Full-Disclosure] Fw: change of address
    ... Maxime Ducharme ... Administrateur reseau, Programmeur ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
    (Full-Disclosure)
  • Re: How do I look up an IP address?
    ... Maxime Ducharme ... Administrateur reseau, Programmeur ... > I am getting emails from NETGEAR that attacks are bring dropped. ...
    (comp.security.firewalls)
  • Re: Run ASP Script as Scheduled Job
    ... Unfortunatley the server I will need to run this on is hosted by a different ... "Maxime Ducharme" wrote in message ... > Wget allows you to POST data, ... >> which mean I can't use either the global.asa or a standalone vbs script ...
    (microsoft.public.inetserver.asp.general)