2000301

	TCP port scan
advICE :Intrusions : 2000301

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
An attacker has attempted to scan your system
Details
A hacker may be scanning your system to see what services are available. Sometimes this is done in preparation for a future attack, or sometimes it is done to see if your system might have a service which is susceptible to attack.
A false-positive may occur if an application or user is legitimately connecting to several ports; to determine whether this is likely, look at the port to see if it is an expected port number.

more information

advICE: port scan: Explains port scanning in depth, and describes the various types of port scans.
advICE: ports: A list of some common ports hackers might scan for.
advICE: Reconnaissance: More info about hacker scans against the system.

parametric information

port The most recent TCP destination ports.

configuration for this item

tcpscan.h-threshold 4 The number of unique ports to trigger an intrusion detection.

 
Version appeared:

TCP port scan