Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Constantly Being Port Scanned


  • Please log in to reply

#1
cleverboy12

cleverboy12

    Member

  • Member
  • PipPipPip
  • 687 posts
Hi There,

Recently I have been constantly being port scanned from a french IP internet and telephone company.

The scans were targetting ports

1080, 3128, 6667, 42424

Please could anyone let me know why am being port scanned on these ports.

Thanks :tazz:

Edited by cleverboy12, 24 October 2005 - 07:32 AM.

  • 0

Advertisements


#2
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
1080 is the socks port

ndl-aas 3128/tcp Active API Server Port
ndl-aas 3128/udp Active API Server Port

and the other two are outside of the reserved range...so they could theoretically be anything...i'm not sure why you would be getting port scanned but if you can actually track down who is scanning you...try blocking them in your router...or your firewall
  • 0

#3
cleverboy12

cleverboy12

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 687 posts
My actual concern is why they are port scanning me.

It seems to be coming from a Italian Interent + Telephone company.

Seems to have stopped now but is there much to be concerned about if it is a one off thing.

Thanks for any help :tazz:
  • 0

#4
admin

admin

    Founder Geek

  • Administrator
  • 24,504 posts
I'd guess it's most probably a consumers computer that's been compromised. The IP address is registered to their ISP. This 'zombie' system is scanning other system looking for specific exploits it can use to infect other systems. This is very common, and another reason why it's important to keep your system updated.
  • 0

#5
cleverboy12

cleverboy12

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 687 posts
if all your ports are in stealth mode then you are safe right ?
  • 0

#6
Tyger

Tyger

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,896 posts
Look in your Event viewer security logs to find more information. Or was this how you found out?
  • 0

#7
cleverboy12

cleverboy12

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 687 posts
this was how i found out by it flashing then taking me there Sygate.

If it was a one off thing is it something to be concerned about ?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP