Unsolicited connection attempt

LULUBELLE_2

I've just been looking at my firewall log - I have BT Broadband, so Bulldog would have no reason to attempt to communicate with me. What do you techie experts think? I e-mailed the contact listed on the 'WHOIS' database, but the e-mail has bounced. I expect unsolicited attempts from other countries, but not through a reputable (??) ISP in the UK.


A computer at host-84-9-204-206.bulldogdsl.com has attempted an unsolicited connection to TCP port 2950 on your computer.
TCP port 2950 is commonly used by the "ESIP" service or program.

Darksun

I'm assuming it's a user of Bulldog rather than Bulldog themselves. If it happens repeatedly and it really bothers you, email abuse@bulldogdsl.com with the relevent firewall logs, but it's really nothing to worry about.

LULUBELLE_2

It's been happening every few minutes today. Thanks for the mail addy. :beer:

NastyMatt

Does your firewall allow you to turn off ports? If so, switch this one off.

Lob_Rockster

I am sure it's already blocking that port otherwise there'd be no log of it as an exception.

You have two options:
1) look at the log and contact every abuse@.... address you can find for each address (and prepared to wait a long time for a reply)
or
2) ignore it, safe in the knowledge your packet filter is doing its job

NastyMatt

Lob_Rockster wrote:

I am sure it's already blocking that port otherwise there'd be no log of it as an exception.

which is fine but the remote machine is still trying meaning it knows this machine is live. Switch off ports and look dead.. should mean the remote host stops attempting connections/attack.

albertross_2

If you get a NAT firewalled router, then you'll never see a port scan again ..

Darksun

albertross wrote:

If you get a NAT firewalled router, then you'll never see a port scan again ..

Sure you will, if you look in the router logs (assuming your router model supports logging).

albertross_2

Darksun wrote:

Sure you will, if you look in the router logs (assuming your router model supports logging).

http://forums.moneysavingexpert.com/showpost.html?p=1797409&postcount=2

Bob63

This kind of thing happens all the time. Trying to track & trace it as a private individual is a fruitless task.

Go take the dog for a walk, or talk to your partner, or have a beer - anything but waste your time on it. Then sit back secure in the knowledge that your firewall is protecting you.

Better still, invest in another firewall such as a wireless adsl modem with firewall and NAT. So now you have multiple layers of defence - a firewall on the router and a firewall on your PC, both from different vendors, both using different technology so one will most likely protect you if the other one fails. Job done!

Mike

Threepints

I have to agree with Mike.

Don't worry its really nothing to worry about. Pop along to this site

http://www.grc.com/default.htm

Have browse around. Run the program 'shields up' with your firewall in place and then disable your firewall (you'll be fine for a shortwhile) and run it again.

The results may surprise you