cancel
Showing results for 
Search instead for 
Did you mean: 

port scanned -- should I be worried?

N/A

port scanned -- should I be worried?

Should I be worried? and what can I do about it? I get the same ip address trying something every other day

Thu, 2006-07-20 21:14:53 - UDP Packet - Source:220.164.140.226,59761 Destination:81.174.137.175,2 - [DOS]

Thu, 2006-07-20 21:14:53 - UDP Packet - Source:220.164.140.226,59761 Destination:81.174.137.175,1032 - [DOS]
Thu, 2006-07-20 21:14:53 - UDP Packet - Source:220.164.140.226,59761 Destination:81.174.137.175,4073 - [DOS]
Thu, 2006-07-20 21:14:53 - UDP Packet - Source:220.164.140.226,59761 Destination:81.174.137.175,2 - [DOS]
Fri, 2006-07-21 00:03:21 - TCP Packet - Source:82.48.18.199,3262 Destination:81.174.137.175,6660 - [DOS]
Fri, 2006-07-21 00:03:21 - TCP Packet - Source:82.48.18.199,3264 Destination:81.174.137.175,6663 - [DOS]
Fri, 2006-07-21 00:03:21 - TCP Packet - Source:82.48.18.199,3263 Destination:81.174.137.175,4004 - [DOS]
Fri, 2006-07-21 00:03:21 - TCP Packet - Source:82.48.18.199,3265 Destination:81.174.137.175,6664 - [DOS]
Fri, 2006-07-21 00:03:21 - TCP Packet - Source:82.48.18.199,3266 Destination:81.174.137.175,4080 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240,3494 Destination:81.174.137.175,4004 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240,3514 Destination:81.174.137.175,5544 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240,3529 Destination:81.174.137.175,5555 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240,3533 Destination:81.174.137.175,6053 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240,3550 Destination:81.174.137.175,6054 - [DOS]
Fri, 2006-07-21 05:34:38 - TCP Packet - Source:87.11.114.240 Destination:81.174.137.175 - [PORT SCAN]
Fri, 2006-07-21 05:34:39 - Send E-mail Success!
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3480 Destination:81.174.137.175,3838 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3494 Destination:81.174.137.175,4004 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3514 Destination:81.174.137.175,5544 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3529 Destination:81.174.137.175,5555 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3533 Destination:81.174.137.175,6053 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240,3565 Destination:81.174.137.175,6661 - [DOS]
Fri, 2006-07-21 05:34:41 - TCP Packet - Source:87.11.114.240 Destination:81.174.137.175 - [PORT SCAN]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3494 Destination:81.174.137.175,4004 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3514 Destination:81.174.137.175,5544 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3529 Destination:81.174.137.175,5555 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3533 Destination:81.174.137.175,6053 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3550 Destination:81.174.137.175,6054 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240,3627 Destination:81.174.137.175,8844 - [DOS]
Fri, 2006-07-21 05:34:47 - TCP Packet - Source:87.11.114.240 Destination:81.174.137.175 - [PORT SCAN]


thanks
11 REPLIES
James
Grafter
Posts: 21,036
Registered: 04-04-2007

port scanned -- should I be worried?

It's pretty normal these days.
lingbob
Grafter
Posts: 734
Registered: 05-04-2007

Re: port scanned -- should I be worried?

Quote
Should I be worried? and what can I do about it? I get the same ip address trying something every other day

The time to start worrying is if you get literally thousands of them.

JOOI, what router do you have?
N/A

port scanned -- should I be worried?

netgear 834gt

thanks
lingbob
Grafter
Posts: 734
Registered: 05-04-2007

port scanned -- should I be worried?

Does it have the latest firmware, if not, you may like to upgrade it. I upgraded mine a few months ago and, amongst other things, it fixed problems with incorrect logging.
N/A

port scanned -- should I be worried?

Looks like the netgear is acting exactly the way it should. I also get a lot of these but just turn off the logging. It won't get past the firewall.
Azagoth
Grafter
Posts: 613
Thanks: 1
Registered: 01-08-2007

port scanned -- should I be worried?

You think that's bad?

I regulary get at least 100 scans from a +Net address in a minute.
Community Veteran
Posts: 1,229
Thanks: 1
Registered: 30-07-2007

port scanned -- should I be worried?

I have had huge numbers of hits per second in the past from dozens of different addresses ; after a bit of googling I concluded it's what I think is called "p2p afterglow" -- if you have a dynamic IP and pick up an address previously used by someone running a torrent, other p2p clients continue to try to connect to what is now your IP "thinking" there'll be a torrent there.
This was when i was using USB modem and just ZA; now I've got a firewall router I never seem to see this in my firewall logs.
N/A

port scanned -- should I be worried?

Guess theres no need to worry then Smiley
craiglay
Grafter
Posts: 138
Registered: 27-06-2007

port scanned -- should I be worried?

As an IT Network Manager, I often get asked questions regarding collegues home computers. One of the answers is, "with broadband, get a decent router. It will cause less problems in the long run" Its suprising how many people just go.. "Na, dont need it, I get a free modem!!"

They are the same people who a couple of months later ask me why their computer is full of viruses, spyware, playing up.. etc..

This kind of port scanning is pretty normal nowadays and with a dynamic IP, you can still receive packets from the last "owner", especially p2p. However, without the right equipment or at least a firewall, its bad news. Someone a while ago said an unprotected computer will not last more than around an hour without contracting something.. I thought they were joking!! Then when one is in, they all come.

So... Get a decent firewall (ZA, sygate.. etc) or better still a router. I have a Netgear DG834 and have zero problems...
newinvention
Grafter
Posts: 139
Registered: 30-07-2007

port scanned -- should I be worried?

Craiglay,

I had a netgear router that was recently fried during a thunderstorm (my fault for not completely disconnecting). I've fallen back on the 'free' modem that Plusnet sent me - BT Voyager 240. Though this is a 'free' one, it's an OK router isn't it from the point of view of firewalls etc? It says on the box it has a firewall. I can't afford to get anything horrible on my system, so would be interested to know what you think of this one. Thanks.
craiglay
Grafter
Posts: 138
Registered: 27-06-2007

port scanned -- should I be worried?

All too easy not to, especially if your at work.. At least it wan't your PC that was fried!!

I have looked at the specifications for the router, and yes, it definately has a firewall. It also have something called NAT (Network Address Translation) which aids in hiding you computer from the nastyness of the internet.

Assuming either the default setting for the firewall and NAT is enabled or you have set it up, you're pretty well protected. If you do nothing but surf, email and occasional download, enable the Windows Firewall in the control panel for extra protection.

Craig