Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

General Security General Security
Search Search
Search for:
Tech Support Guy > > >

Intrusion Attempt Detected: Fin Scan


(!)

Kalanadian's Avatar
Kalanadian Kalanadian is offline
Member with 39 posts.
THREAD STARTER
 
Join Date: Aug 2005
05-Dec-2008, 10:50 PM #1
Intrusion Attempt Detected: Fin Scan
Ever since Dec 1 we've been getting a notice from our firewall saying it's blocked an intrusion attempt from Fin scan. Dec 2 alone we had 49 alerts. I'm not too concerned because apparently our computer is preventing it, but what I would like to know is what it is and where it is coming from. Is it coming from a particular site? Is there something I should be doing other than ignoring these firewall mesages?

Here are the details that are given:

Description: Intrusion attempt detected: Fin Scan

Action: Firewall has blocked this traffic
Time: 05/12/2008 8:49:07 PM
Direction: Inbound
Protocol: tcp
Services: TCP High ports in


Then it gives the remote address, remote port, local address and local port...

Thanks for any help!
lunarlander's Avatar
Computer Specs
Member with 5,508 posts.
 
Join Date: Sep 2007
05-Dec-2008, 10:57 PM #2
Scans are just scouting probes. The attacker wants to see what program/services you have running. There isn't much you can do about them.
Kalanadian's Avatar
Kalanadian Kalanadian is offline
Member with 39 posts.
THREAD STARTER
 
Join Date: Aug 2005
05-Dec-2008, 11:15 PM #3
Alright, so does it have to do with any specific websites I'm on? Or is it just a random thing...?
lunarlander's Avatar
Computer Specs
Member with 5,508 posts.
 
Join Date: Sep 2007
06-Dec-2008, 04:24 PM #4
Usually it doesnt have anything to do with where you surf to. They just find random ip addresses to scan.

If you don't have a router, then get one, as it provides some protection and doesn't allow them to directly scan your PCs. Get one even if you only have 1 PC.
hrlow2's Avatar
Computer Specs
Member with 2,713 posts.
 
Join Date: Oct 2008
Location: West"By God" Virginia
Experience: continuing to learn.
06-Dec-2008, 05:09 PM #5
Sygate firewall has what they call Backtrace where you can track to see where it is coming from
Kalanadian's Avatar
Kalanadian Kalanadian is offline
Member with 39 posts.
THREAD STARTER
 
Join Date: Aug 2005
06-Dec-2008, 06:57 PM #6
I already have a router.. this is only happening on my home computer not the laptop. It's just really annoying. It's popping up 20+ times a day..
Kenny94's Avatar
Account Disabled with 2,026 posts.
 
Join Date: Dec 2004
Location: S.C
06-Dec-2008, 07:27 PM #7
Quote:
I would like to know is what it is and where it is coming from.
See WHOIS at:

arin.net/whois/
Kenny94's Avatar
Account Disabled with 2,026 posts.
 
Join Date: Dec 2004
Location: S.C
06-Dec-2008, 07:28 PM #8
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑