Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I know this is probably not the place to ask, but I have a security issue that is NOT being resolved by my ISP (infoavenue.net). They've been notified of this issue. I'm getting TCP port scanned every 30 seconds from an IP adress within my ISP range from TCP ports 445, 135 and 1025. (probably Agobot). I notified my ISP and they haven't done a thing. I know this is probably a worm, but the atttacks are slowing me down tremendously. I've had enough. The IP address that is scanning me is: 204.116.228.179
Please, someone help me stop these attacks. Hacker requested.
I will be ever so greatful...

Hello Janet, a good anti-virus, firewall and spyware scan should stop that however how do you know it's an attack, it could just be a ping.
Does it happen at certain times or always?
MCSE CertifiedMinesweeper Consultant & Solitare Expert

Hi Janet,
I have the same problem.
If you're in the 'first world' just tell your ISP to fix it or you'll cancel the service.
Not so clear cut out here in the boonies.
M2

LINK to some info on ports - port 135 is sometimes associated with the Blaster worm, and port 1025 and port 445 sounds suspect too. Sounds like a decent router with NAT/firewall and some personal firewall and AV is required. Good luck :)
P4 LGA775 3.0GHz
2x256Mb DDR2 533MHz
XFX 6800GT PCI-E

Guess what? When I woke up this morning, I noticed the scanning had finally stopped. I get port scans all the time from all over. Typically I just overlook them. But that particular one was relentless.
Thanks everyone for your input.

#1- A firewall will usually block scans on your system if they attempt to go any further then just a scan.You then can always say dont show this again and will not recieve the scan anymore.
#2- If you believe it is a worm then most likely the person isnt sending it to you.Most often worms have their own ability to scan for vulnerables PC's on the internet from any computer.So say someone got infected with the worm, the worm will then send more copies of itself from that PC to PC's then making you think that they are actually trying to compromise your system.
31337

Hey WhiteHat. Late entry here. That's exactly what was happening. There are some infected PC's within our ISP network. I think they're bots. The rootkits are coming to get us!! LOL. BTW, I installed a router yesterday. It's dropping everything before it gets to my PC. No ZA scans whatsoever. Hey, you using BO? Yikes! Remind me to never tick you off...LOL. Thanks for your input. I need all the help I can get.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |