Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I Keep getting my ports scanned! sometimes its my isp which has never happened before but today its something else here is my sygate log...
Somebody is scanning your computer.
Your computer's TCP ports:
2745, 1025, 6129, 3127 and 80 have been scanned from 66.73.198.192.
AND THIS ONE NOW!!!!!!!
Denial of Service "Smurf" attack detected.
Description:
A Smurf attack occurs when a hacker spoofs your system's IP address and then broadcasts a ping request to several subnets. The resulting deluge of ping responses ties up your system as well as the various network subnets pinged.Help
this latest one does not come back with any info to report the attack
Tim

hi tim,
i'll get to the point> get a router.
it will add another layer of protection to your system.
all the best,
murve

hi tim,
more info, you may have the my doom worm on your port 3127, and on 6129, you may be intruded by possibly by a website called www.dameware.de
hope this helps,
murve

the ISP scans you to be sure you are not running services that can be dangerous (email server for example).
getting a hardware router/firewall is a great idea.

Just about everyone on broadband gets port scans. 99% are worms and trojans. It's a well-known myth that ISPs scan you to see if you're running a webserver etc. They don't need to, as their routers can log traffic and filter logs to report on such connections (if they ever do that either). What people are seeing is a scan from an address on their subnet, i.e. where the first three numbers of the IP are the same as theirs. Again, this'll be a worm or trojan, as they will usually start with a scan of addresses on the subnet the infected PC is on.
Expert: someone who reads the manual when no-one's looking

not a myth. RoadRunner says on their home page that they reserve the right to scan any customer looking for whatever. I think the name in my log is customerscan.rr.com

Some do - most of what people believe are ISP scans are virus/trojan scans from similar addresses, as I said. Most ISPs don't bother because they know that such scans are easily blocked with a firewall.

If some ISPs scan, then it isn't a myth.
customerscan.sec.rr.com scanned me today.
sec stands for security. I am happy to see them do it.They are looking for people who are infected & unknowingly run mailservers (SMTP) or other problem software. too many people don't have firewalls.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |