PDA

View Full Version : Security Logs active issues Sygate


Sava700
03-08-05, 04:23 PM
Ok since yesterday I've seen over 30logs in my sygate with for example:
Your computer is being scanned:
Your computers TCP ports: 65506, 17771, 63000, 4480, 14441 have been scanned from 82.244.108.12


Ok now what is going on with that? and who is that IP belong too if anyone can trace it back I'm not very happy if someone is trying to mess with me. I've also had other Intrusion Detections that say:

[181.1] Inbound DCE BIND to potentially vulnerable RPC DCOM interface
attempt detected.

OR: just traffic blocked from this address blah blah.

Anyone have any ideas what is going on?
FYI: I've been having issues over the last 2-3 weeks with ISP's DNS screwed up for me and half the state so I've been swapping back and forth with different DNS's to try to get a better speed going till today which is fixed I hope. So not sure if this has anything to do with it.

mnosteele52
03-08-05, 05:32 PM
Just use WhoIS.com (http://www.whois.sc) or simply use the back trace feature in Sygate. It appears that IP is from France, I personally wouldn't worry, I see crazy logs all the time on clients pcs, it just shows Sygate is working and protecting you.

If you continue to get the same IP I would suggest reporting to the ISP of the IP. A lot of times someone is infected with malware and doesn't know it and his pc is being used as a bot.

:)