| Вчера получил письмо, текст которого полностью приведу ниже. От души посмеялся: зачем мне какие-то порты? К тому же, сайт полностью из статических страниц. Хотя понимаю, что мой сайт как-то в этом все же участвует. Переслал хостеру – упорно молчит…
=================================
Sent: Monday, February 05, 2007 5:56 PM
Subject: For_manager_of_the_site
Добрый день, от Вас идет
сканирование портов
Прошу прекратить.
Portscan detected
Event description
Host: site.ru (77.777.777.77)
Details: protocol: TCP, source: 77.777.777.77, destination: 193.227.206.191, ports: 2062, 1836, 1958, 1965, 1967, 1992, 1994, 2000, 2004, 2007, ...
Alert description:
A portscan is an attempt by an attacker to count the services running on a machine by probing each port for a response. This is an attempt by an intruder to determine how best to attack a system. By determining which services are running on a host, an intruder can direct an attack more effectively, reducing the amount of time and effort required to gain unauthorized access. There are many legitimate applications (e.g., FTP) that can appear to be a portscan. Therefore, you should investigate the initial events to determine whether they were legitimate or not.
This message is automatically generated, please do not reply to this e-mail.
Mon Feb 05 16:35:32 2007 | |