| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
Lots of port scans-last few days
|
Original Message
|
Name: erg57
Date: March 7, 2008 at 05:02:26 Pacific
Subject: Lots of port scans-last few daysOS: XPCPU/Ram: 2.6 GHZManufacturer/Model: Dell |
Comment: I am not an alarmist, but I am getting lots of port scans---one every ten seconds from same IP. I dont have their IP info with me right now (at work). Anyone else having this issue as of late? I use Sygate firewall. I use hardwired cable modem-no wireless. I checked ports with GRC and a few others and all ports show as "stealthed". Any recommendations? Any recourse? It has been years since I have seen this type of activity? Its more of an annoyance than anything.
Report Offensive Message For Removal
|
|
Response Number 1
|
|
Reply: Its always best to err on the side of caution. Port Scans generally mean malicious activity especially if its from the same IP address. Depending on the type of firewall you have you could black list that IP address. But by the same token as long as your network is secure and you dont have any erroneous ports open pointing to your internal LAN then there isnt too much to worry about. SBS Specialist extraordinaire!!
 Report Offensive Follow Up For Removal
|
|
Response Number 2
|
|
Reply: Almost everyone is scanned constantly, the average PC is scanned over 400 times a day. As long as you have a GOOD Firewall (Router), just ignore them. If you do a little research on how a router works, your concerns will vanish. _________________________
Embrace paranoia, they ARE out to get you!
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
|
Reply: IP Address : 77.92.68.39 [ server52638.uk2net.com ]
ISP : -
Organization : UK2.NET - UK's biggest host
Location : GB GB, United Kingdom
City : London, H9 -
Latitude : 51°50'00" North
Longitude : 0°11'67" West
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
ReferralServer: whois://whois.ripe.net:43 NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
NameServer: SUNIC.SUNET.SE And there you go
World Library
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: Derek
Date: March 8, 2008 at 14:59:01 Pacific
|
Reply: If, as you say, your ports are all stealthed then I don't think you have any need to worry. Your firewall is there to keep them out and it appears to be doing so. I stopped looking at my logs way back.... some other bloke...
Report Offensive Follow Up For Removal
|
Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home
Results for: Lots of port scans-last few days
NIS 2007 Not Warning of Port Scan Summary: Hi guys, I'm taking Norton Security Suite 2007 for a trial spin and so far it's right up my alley. I do have one thing that is on my mind, though it may not be anything to be paranoid about at all. Yo...
www.computing.net/answers/security/nis-2007-not-warning-of-port-scan/20428.html
port scans. what to do... Summary: ok, just today i've gotten 6 things on my firewalls sercurity log. this same person keeps doing port scans and i dont know what i should do. i ahve the IP address and some info on the "person". IP ADD...
www.computing.net/answers/security/port-scans-what-to-do/5709.html
Port Scans Summary: The above is all true, however, even through a complaint may seem useless as far as "catching" the guy, it is still very valuable in the long term that the more people who make noise about this proble...
www.computing.net/answers/security/port-scans/11055.html
