Page 1 of 1

Incoming connections detected by Little Snitch

Posted: December 18th, 2012, 1:02 pm
by korneliuz
I am behind a router, but I keep getting incoming connection attempts to sabnzbd. Any ideas what these are from?

Re: Incoming connections detected by Little Snitch

Posted: December 18th, 2012, 1:05 pm
by sander
What is the source IP address and domain name of the incoming session?

Oh, never mind: if you just see something incoming on port 8080, it's because port 8080 is a well known port for web servers and proxy servers. So probably a robot / script kiddie looking for open proxy servers.

Just ignore it.

Re: Incoming connections detected by Little Snitch

Posted: December 18th, 2012, 1:10 pm
by korneliuz
Image

Re: Incoming connections detected by Little Snitch

Posted: December 18th, 2012, 1:17 pm
by sander
I checked the first IP address via whois: a Chinese IP address. So: just a port scanner. As long as you keep blocking it, there is no problem.

If you want to be even more safe, put SABnzbd on a unknown port, for example 12333, or 18080, or 18888 (but stay below 65535).

Re: Incoming connections detected by Little Snitch

Posted: December 18th, 2012, 1:21 pm
by korneliuz
sander wrote:I checked the first IP address via whois: a Chinese IP address. So: just a port scanner. As long as you keep blocking it, there is no problem.

If you want to be even more safe, put SABnzbd on a unknown port, for example 12333, or 18080, or 18888 (but stay below 65535).
gotcha. thanks