Port Scans

Discussion in 'other firewalls' started by nonmirecordo, Feb 12, 2005.

Thread Status:
Not open for further replies.
  1. nonmirecordo

    nonmirecordo Registered Member

    Joined:
    Jul 19, 2004
    Posts:
    145
    Location:
    Cambridgeshire, UK
    Can anyone suggest why my firewall (Agnitum Outpost) has suddenly started reporting:

    16:29:05 SYSTEM OUT REFUSED TCP www.wilderssecurity.com HTTP Address 64.91.226.241 blocked because an attack was detected

    following port scanning (from Wilders) ?

    This has only happened this afternoon (UK).
     
    nonmirecordo, Feb 12, 2005
    #1
  2. snapdragin

    snapdragin Registered Member

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi nonmirecordo,

    I have moved your thread from the NOD32 forum as this is not a NOD antivirus support issue.

    Have you made any changes to OP prior to this happening?

    Regards,

    snap
     
    snapdragin, Feb 12, 2005
    #2
  3. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    The above indicates this was outbound, is it from the attack detection plug-in? Any more information in the logs on ports?

    If it was a valid outbound connection to this site, it is likely a false positive.

    Regards,

    CrazyM
     
    CrazyM, Feb 12, 2005
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...