Port Scans

Discussion in 'other firewalls' started by nonmirecordo, Feb 12, 2005.

Thread Status:
Not open for further replies.
  1. nonmirecordo

    nonmirecordo Registered Member

    Joined:
    Jul 19, 2004
    Posts:
    145
    Location:
    Cambridgeshire, UK
    Can anyone suggest why my firewall (Agnitum Outpost) has suddenly started reporting:

    16:29:05 SYSTEM OUT REFUSED TCP www.wilderssecurity.com HTTP Address 64.91.226.241 blocked because an attack was detected

    following port scanning (from Wilders) ?

    This has only happened this afternoon (UK).
     
  2. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi nonmirecordo,

    I have moved your thread from the NOD32 forum as this is not a NOD antivirus support issue.

    Have you made any changes to OP prior to this happening?

    Regards,

    snap
     
  3. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    The above indicates this was outbound, is it from the attack detection plug-in? Any more information in the logs on ports?

    If it was a valid outbound connection to this site, it is likely a false positive.

    Regards,

    CrazyM
     
Loading...
Thread Status:
Not open for further replies.