NetTalk Central

Author Topic: Service Attack. How safe is Nettalk?  (Read 4944 times)

jari@softmade.fi

  • Full Member
  • ***
  • Posts: 134
    • View Profile
    • Email
Service Attack. How safe is Nettalk?
« on: February 27, 2017, 07:29:39 AM »
Hello

This has been going on for days but so far nothing has happened.
Nettalk webserver works still nice.
Just wonder is this a security risk?

Jari

kevin plummer

  • Hero Member
  • *****
  • Posts: 1195
    • View Profile
    • Production Accounting and Software Payroll
Re: Service Attack. How safe is Nettalk?
« Reply #1 on: February 27, 2017, 02:06:56 PM »
It looks like someone is doing a port scan on your server and these are being forwarded to your web app.If so, you should have all ports on your firewall closed and only those you need open.

jari@softmade.fi

  • Full Member
  • ***
  • Posts: 134
    • View Profile
    • Email
Re: Service Attack. How safe is Nettalk?
« Reply #2 on: February 27, 2017, 10:15:08 PM »
Thanks Kevin

37.219.130.250 is not our IP

Jari

kevin plummer

  • Hero Member
  • *****
  • Posts: 1195
    • View Profile
    • Production Accounting and Software Payroll
Re: Service Attack. How safe is Nettalk?
« Reply #3 on: March 01, 2017, 04:34:22 AM »
what shows up on your web server and what port is the connection coming through on?

urayoan

  • Full Member
  • ***
  • Posts: 222
    • View Profile
    • AZ Rock Radio
Re: Service Attack. How safe is Nettalk?
« Reply #4 on: March 01, 2017, 06:22:56 AM »
In my opinion, it looks like a port scan coming from IP 37.219.130.250 to any possible ports to check services.

Maybe nmap or Nessus?

I think NetTalk is not gonna have any problems handling that, but is good idea to check other possible services from your host exposed to the internet (SMTP servers, telnet or FTP servers for example), to make it more secure and peace of mind.

Cheers