cancel
Showing results for 
Search instead for 
Did you mean: 

Any other plusnet users getting scanned by other plusnet IPs

N/A

Any other plusnet users getting scanned by other plusnet IPs

hi anyone else getting constant scans from other plusnet users/ip's??
on ports 135, 139, 1025, 445, 3127 and 6129
started 3 days ago


i have raised a ticket a few days ago, but no ones willing too answer
13 REPLIES
N/A

Zone Alarm

Download a tiny software programme called Zone Alarm from www.zdnet.com

This will protect you for free as there are no better safe programmes to date.
N/A

Any other plusnet users getting scanned by other plusnet IPs

Maybe this topic is relevant to your issue.

http://portal.plus.net/central/forums/viewtopic.php?t=15786

Best regards

Mark
wandelaar
Grafter
Posts: 186
Registered: 17-08-2007

Any other plusnet users getting scanned by other plusnet IPs

musiclab

I presume from your query that you already have a firewall of some sort in place.

I am using a router and to date have found not problems in the logs from the router apart from when I was testing vulnerability of my system using various online testing sites

Perhaps you should raise a contact us ticket indicating the plusnet addresses you are being port scanned from as it sounds to me as if there are some plusnet users who may be infected with virii.

Regards

Dave
N/A

Re: Any other plusnet users getting scanned by other plusnet

Quote
hi anyone else getting constant scans from other plusnet users/ip's??
on ports 135, 139, 1025, 445, 3127 and 6129
started 3 days ago


i have raised a ticket a few days ago, but no ones willing too answer


Yep I'm getting this as well. My sygates going bezerk.

What does it all mean? :shock:
N/A

Any other plusnet users getting scanned by other plusnet IPs

Yep, hijacked addresses no doubt or a new breed of unscrupulous users who are determined to hunt out vunerabilities. Make sure you have a good firewall in place and report the logs received to abuse@plus.net. They need a reasonable amount of reports for the same address before taking action.
zpeterk
Grafter
Posts: 377
Registered: 14-04-2007

Any other plusnet users getting scanned by other plusnet IPs

just read my router log and there seems to be more than normal atempts form addresses in the 81.174.xxx.xxx range
N/A

Any other plusnet users getting scanned by other plusnet IPs

The IP's would appear to be dynamic ones assigned to dialup. This has been going on for a week or so.
The users have most probably got a "network broadcasting" virus of malware.
Even if PLusNet contact the user who is doing it, they still have to find out how to stop it and are under little pressure to do so.
N/A

Any other plusnet users getting scanned by other plusnet IPs

yeh man i aint worried about it, i trust my sygate pro :lol: just never usually get this many attacks in a few days, and all from my same isp
wandelaar
Grafter
Posts: 186
Registered: 17-08-2007

Any other plusnet users getting scanned by other plusnet IPs

Well guess what.

Since posting here, I am also now being scanned.

All from the same IP 80.229.xxx.x.

I believe the address is a plusnet ADSL user.

I'm not unduly worried as the router is doing it's stuff..

I have passed on the relevant info to abuse@plus.net which may help them if this particular IP has a problem.

Regards

Dave
N/A

Any other plusnet users getting scanned by other plusnet IPs

From the moment I first connected with Plus Net, I was getting scanned from a Plus Net Address.

I now use a NAT based router with a software firewall. My router logs don't provide me with any info about potential attacks or scans, and my firewall hasn't listed any either.

So to be honest I have no idea if I am still being scanned. I could set the router to place my PC in the DMZ, and let my software firewall pick up if I'm scanned. But I'm not that concered.
N/A

Any other plusnet users getting scanned by other plusnet IPs

seems too have stopped today...

happy easter all
N/A

Ring Plusnet

If they are scanning ring Plusnet and see if they can watch for you or something to catch these bored idiots.
pcorker
Grafter
Posts: 309
Registered: 05-09-2007

Any other plusnet users getting scanned by other plusnet IPs

I found that most of these probes ceased after about 3/4 days. Presumably, infected machines were fixed or malicious people got bored and moved on.
So I only think about reporting any long term ones.
Pat.