Computing.Net > Forums > Security and Virus > Lots of port scans-last few days

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Lots of port scans-last few days

Reply to Message Icon

Name: erg57
Date: March 7, 2008 at 05:02:26 Pacific
OS: XP
CPU/Ram: 2.6 GHZ
Product: Dell
Comment:

I am not an alarmist, but I am getting lots of port scans---one every ten seconds from same IP. I dont have their IP info with me right now (at work). Anyone else having this issue as of late? I use Sygate firewall. I use hardwired cable modem-no wireless. I checked ports with GRC and a few others and all ports show as "stealthed". Any recommendations? Any recourse? It has been years since I have seen this type of activity? Its more of an annoyance than anything.



Sponsored Link
Ads by Google

Response Number 1
Name: scurlaruntings
Date: March 7, 2008 at 06:56:16 Pacific
Reply:

Its always best to err on the side of caution. Port Scans generally mean malicious activity especially if its from the same IP address. Depending on the type of firewall you have you could black list that IP address. But by the same token as long as your network is secure and you dont have any erroneous ports open pointing to your internal LAN then there isnt too much to worry about.

SBS Specialist extraordinaire!!


0

Response Number 2
Name: Martin Crandall
Date: March 7, 2008 at 08:15:44 Pacific
Reply:

Almost everyone is scanned constantly, the average PC is scanned over 400 times a day.

As long as you have a GOOD Firewall (Router), just ignore them.

If you do a little research on how a router works, your concerns will vanish.

_________________________
Embrace paranoia, they ARE out to get you!


0

Response Number 3
Name: erg57
Date: March 7, 2008 at 11:45:08 Pacific
Reply:

Thanks

here is the IP

77.92.68.39


0

Response Number 4
Name: worldlibrary
Date: March 7, 2008 at 12:43:25 Pacific
Reply:

IP Address : 77.92.68.39 [ server52638.uk2net.com ]
ISP : -
Organization : UK2.NET - UK's biggest host
Location : GB GB, United Kingdom
City : London, H9 -
Latitude : 51°50'00" North
Longitude : 0°11'67" West


OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
NameServer: SUNIC.SUNET.SE

And there you go


World Library


0

Response Number 5
Name: Derek
Date: March 8, 2008 at 14:59:01 Pacific
Reply:

If, as you say, your ports are all stealthed then I don't think you have any need to worry.

Your firewall is there to keep them out and it appears to be doing so. I stopped looking at my logs way back....

some other bloke...


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon

POS.TMP files remain in D... compaq presario SR1303WM



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Lots of port scans-last few days

NIS 2007 Not Warning of Port Scan www.computing.net/answers/security/nis-2007-not-warning-of-port-scan/20428.html

port scans. what to do... www.computing.net/answers/security/port-scans-what-to-do/5709.html

Port Scans www.computing.net/answers/security/port-scans/11055.html