SYN Attacks - how i cant stop it

[Mikhail Goriachev]

> How i cant stop the SYN and Port Scanner Attacks. I have a attacks all
> nights.
> Check this.

I get this phenomena from time to time too... I reckon some kiddies are
trying to get in by scanning ports.

> Feb  6 13:33:17 TCP: port scan mode expired for
> ANancy-106-1-4-183.w81-248.abo.wanadoo.fr (81.248.192.183) - received a
> total

Now this wanadoo.fr looks familiar. Couple of months ago a friend of mine
detected way too much activity on his FTP server which wasn't secured
(just a default installation). He later found that someone (through
wanadoo.fr) was using his FTP server as a WAREZ storage by creating a
folder with " " name (just an empty space so you couldn't see it by having
a quick look using 'ls'). Off topic but I think this is worth mentioning.

>
> Regards,
> Jean
>
>
>
> -------------------------------------------------
> This mail sent through ICENetworks.com: http://www.icenetworks.com
>
> _______________________________________________
> freebsd-security at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to
> "freebsd-security-unsubscribe at freebsd.org"
>


-- 
--------------------------------------
Mikhail Goriachev
Telephone:    +61 (0)3 62252501
Mobile Phone: +61 (0)4 38255158
e-mail:       mikhailg at webanoide.org
URL:          http://www.webanoide.org
GPG Key ID:   4E148A3B
--------------------------------------