Getting repeatedly port scanned!!!

[RJARRRPCGP]

Has anyone else lately been getting port scanned within every approxmately 5
minutes, every approximately 15 minutes or 1 hour?

If anyone else has been getting repeatedly port scanned, the cause probably is the Sasser virus. I'm using Sygate Personal Firewall 5.5.

I believe the Sasser virus probably is spreading as fast as the Blaster virus, if not faster than the Blaster virus.

BTW, I just got port scanned again as I was typing.

 

[Slougi]

Goot thing I don't use that Windoors thing

 

[rcgamer]

if your concerned then block the ip adress of the ones doing the port scanning. sygate has the feature.

 

[Nighty0]

I got 90 scans in the last hour.......
All blocked by my BlackIce IDS......

 

[RJARRRPCGP]

if your concerned then block the ip adress of the ones doing the port scanning. sygate has the feature.

Yep, I already blocked 2 IP addresses. I did notice that even when the IP address is blocked, if the computer with the blocked IP address attempts to port scan me, Sygate Personal Firewall still will give me a port scan warning.

 

[Modem]

Notify someone, then. Perhaps the FBI or something? Espically if you keep getting scanned by the same source.
- Modem

 

[pj64er]

Goot thing I don't use that Windoors thing

in relation to that...what do I do to make my linux box "secure"?

 

[aprentice]

neither linux nor windows is safe, we see linux servers get hacked everyday, linux may be more secure in some aspects, but don;t think for one second your safe. The only way to keep safe is to stay ahead of the game and keep up with patches, if you kept up with windows update, your arent vulnerable to sassar. And port scans mean nothing, it just means someone is trying to connect to various ports, and obviosly unsuccessfully, if you were to put up a firewall, you'd be amazed how often you get scanned, intentionally or not. People scan B class range ips all the time, welcome to the internet.

 

[blight]

You could find out the hostname for the ip, then it's ISP and send an email to [email protected]in so they make the one scanning you stop doing so

 

[Slougi]

in relation to that...what do I do to make my linux box "secure"?

Keep up with updates for services you run, eg ssh. Don't run any unnecessary stuff. That's about it If you don't have something listening on a port you can't get hacked that way. Well unless there is a kernel bug.

 

[pj64er]

so firewalls (iptables) is not necessary? great...this makes sense now that I think about it.

 

[RJARRRPCGP]

Because the repeated port scanning just started this month, probably
the repeated port scanning is being caused by the Sasser virus.