Kbase P36540: Possible Port Scan detected from ip address:port
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
1/27/2009 |
|
Status: Verified
SYMPTOM(s):
Possible Port Scan detected from 191.1.5.2:55759
Possible Port Scan detected from <clientIP>:<portnumber>
Messages in database log file
Client disconnected before sending any data
FACT(s) (Environment):
All Supported Operating Systems
Progress 8.3E
CAUSE:
This informational message tells the DBA that a client is running a port scan against the Server. The numbers identify the IP address and the port the port scan is orginating. The port scan tests for active or open ports. No client connect information is sent. Earlier releases of Progress would not properly handle a port scan and would decrement the user count.
FIX:
This is an informational message. It is a good idea for the DBA to identify the machine and user running the port scan.