2003010

	NNTP port probe
advICE :Intrusions : 2003010

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
Someone is scanning the system to see if it supports the NNTP service.
Details
NNTP (Network News Transport Protocol) is the protocol used to transfer USENET messages around the Internet.
Hackers regularly scan the Internet looking for machines that might support this service. Primarily, they are looking for machines they can use to anonymously read messages from or post messages to. There are web sites that list "open" NNTP servers that can be used anonymously.

more information

TCP port probe: This section describes more about the symptom of somebody probing ports on your system.
Underground Anonymous NNTP: Someone scanning for the NTTP port probe might be looking for a system they can read from or post to anonymously.
NNTP Service: More about the NNTP service.

parametric information

port This indicates the TCP port that was probed.

reason The reason for the port probe.

Firewalled: the incoming TCP SYN or UDP frame was stopped by the firewall.

RSTsent: the incoming TCP SYN frame was rejected by the computer.

ICMPsent: the incoming UDP frame was rejected by the computer.

NOanswer: there was no response to the incoming SYN frame.

 
Version appeared: 2.5

NNTP port probe