School Assignment? Project Due Tomorrow? Chat LIVE With A Programming Expert!

Programming Help

Web Development



What's Here?

  • Members: 300,492
  • Replies: 826,144
  • Topics: 137,484
  • Snippets: 4,420
  • Tutorials: 1,148
  • Total Online: 1,832
  • Members: 76
  • Guests: 1,756

Welcome to Dream.In.Code
Become an Expert!

Join 300,492 Programmers for FREE! Get instant access to thousands of experts, tutorials, code snippets, and more! There are 1,832 people online right now. Registration is fast and FREE... Join Now!




Intrusion attempt

 

Intrusion attempt
sam.adams61

28 Mar, 2009 - 01:09 PM
Post #1

D.I.C Head
**

Joined: 14 Jul, 2008
Posts: 230



Thanked: 10 times
My Contributions
I use a wireless laptop & received the following message: 'An intrusion attempt by localhost was blocked.' The Risk Name was 'Port Scan', the IP address of the attacking computer was provided as was that of the destination computer. The message also stated that Network traffic from localhost matches the signature of a known attack.

I no absolutely nothing about networks, wireless or otherwise, and would appreciate any advice someone could give me concerning this sort of thing...is it something that needs to be taken seriously, and if needs be, how can I deal with it?

In anticipation, many thanks.

User is offlineProfile CardPM
+Quote Post


Core

RE: Intrusion Attempt

29 Mar, 2009 - 01:52 AM
Post #2

Den The Developer
Group Icon

Joined: 8 Dec, 2008
Posts: 2,944



Thanked: 214 times
Dream Kudos: 900
Expert In: C#, VB.NET, .NET Framework

My Contributions
Most likely it wasn't an intrusion attempt. You have a web server installed that probably tried to register itself on a specific port, therefore it scanned if this port is free. This was detected by a software (most likely a firewall) that considered this as a potentially unsafe action and blocked it.

What firewall (or any other protection software) are you using?
User is offlineProfile CardPM
+Quote Post

numeric

RE: Intrusion Attempt

31 Mar, 2009 - 07:03 AM
Post #3

D.I.C Head
**

Joined: 12 Jan, 2009
Posts: 71



Thanked: 7 times
My Contributions
I agree with core - it looks like an app on your PC has checked what ports are already in use on your machine. "localhost" is used by Windows PC's to refer to themselves occasionally. Was the source (i.e the attacking computer) IP address 127.0.0.1 ?
User is offlineProfile CardPM
+Quote Post

no2pencil

RE: Intrusion Attempt

31 Mar, 2009 - 06:18 PM
Post #4

i R L33t Skiddie, k?
Group Icon

Joined: 10 May, 2007
Posts: 13,234



Thanked: 289 times
Dream Kudos: 2875
Expert In: Goofing Off

My Contributions
A portscan can be seen as an intrusion attempt.

If it's being performed by localhost, chances are it was software seeing if ports are available.

The key here is that it only happened once. If it was happening on a timed basis (five minutes/half hour) then I would be seriously concerned.
User is offlineProfile CardPM
+Quote Post

Reply to this topicStart new topic

Time is now: 11/8/09 04:29AM
Invision Power Board v2.1.7 © 2009  IPS, Inc.
Licensed to: MediaGroup1

Live Help!

Be Social

Dream.In.Code RSS Feed Dream.In.Code LinkedIn Group Follow Us On Twitter Fan Us On Facebook

Tutorials

Programming

Web Development

Reference Sheets

Code Snippets

DIC Chatroom

Bye Bye Ads

Monthly Drawing

Thumb Drive

Top Contributors

Top 10 Kudos This Month