cancel
Showing results for 
Search instead for 
Did you mean: 

Paranoia

highway1
Newbie
Posts: 8
Registered: 05-04-2007

Paranoia

I was looking at the log file of my DG834G modem earlier on and noticed the following logs.

Sat, 2007-03-24 18:01:10 - TCP Packet - Source:76.211.231.184,2521 Destination:80.229.16.146,55551 - [DOS]
Sat, 2007-03-24 18:01:15 - TCP Packet - Source:82.251.71.179,3143 Destination:80.229.16.146,55551 - [DOS]


There seem to be about 10 every second and then repeat from the same sources.

Am I being paranoid or is this sometnig normal?

Thanks in advance
3 REPLIES
N/A

Paranoia

This is, sadly, standard background traffic on the internet.

As you state all are from the same source and are attempting to access the same port (and presumably service) it could be that you have been allocated an IP that was formerly used to provide some kind of service over the internet.

In all liklihood however it is random port scanning from a computer that has been compromised and is now part of a "bot net". This will be scanning IPs attempting to find vulnerabilities through which it can install malware.

If you have Windows XP SP2 installed then you should have a software firewall in addition to the hardware firewall on your router, so you should be completely safe from port scanning and can safely disregard any such notices.

If you want to test the visibility of your network on the internet (i.e. if it responds to such pings) you can go here and click on "ShieldsUp".

If you're especially worried by this, or don't like the idea of your usage allowance being eaten into by these pings, you can switch on the PlusNet firewall by going here.

Please be aware though that some services (notably FTP) will not work over the "High" setting, so if you experience problems try reducing the PN firewall to "Low" (which won't block the port you are quoting).
Community Veteran
Posts: 26,339
Thanks: 595
Fixes: 8
Registered: 10-04-2007

Paranoia

It needs to be pointed out that the Plusnet firewall is not available for PAYG users on the alternative (RIN) network.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
highway1
Newbie
Posts: 8
Registered: 05-04-2007

Paranoia

Thanks for the quick reply. It seems to have stopped now anyways. I guess that will teach me to look in places that I dont understand. I did try the ShieldsUp site this afternoon and it said I was watertight. I think I paniced having just installed BitTorrent ans was playing with it for the first time and assumed I had picked something up. Thanks for the advice about the PNet firewall, have a Premier Opt 1 account and I havent even thought about RIN. I will keep an eye on my usage to see if it is climbing.
Thanks again