PC experts: My firewall keeps telling me I'm being scanned... what to do??? - GoFuckYourself.com - Adult Webmaster Forum

X

pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#1

PC experts: My firewall keeps telling me I'm being scanned... what to do???

01-17-2005, 12:50 PM

Ok at least every day, once a day I get a message that a certain IP scanned my ports and that the firewall has banned him for 3 mins. After the 3 mins. I get the message that the block has been lifted and that I should watch if anything suspicious happens.

These scans occur everyday... what can I do to prevent this or take counter measures???

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Tags: None
StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#2

01-17-2005, 12:53 PM

that's normal... and nothing to worry about for the most part. There are constantly servers out there doing surveys (checking for servers, surfers, networks, etc) that do scans, there's DNS's checking stuff... there's.... any number of things. So yes, you'll always have those alerts coming in.

Also, there are virus' out there that look for vulnerable computers... and your firewall just blocked it (if it is)... so don't worry about it. Chances are it's an automated thing and not some person out there who's out to get you.

This is me on facebook
This is me on twitter
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#3

01-17-2005, 01:11 PM

Originally posted by NichePay - StuartD

that's normal... and nothing to worry about for the most part. There are constantly servers out there doing surveys (checking for servers, surfers, networks, etc) that do scans, there's DNS's checking stuff... there's.... any number of things. So yes, you'll always have those alerts coming in.

Also, there are virus' out there that look for vulnerable computers... and your firewall just blocked it (if it is)... so don't worry about it. Chances are it's an automated thing and not some person out there who's out to get you.

Thanks Stuart, it got me worried coz this did not happen before and I thought someone was out to hack me. If my firewall tells me the IP could I trace it somehow?

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment
mardigras

Bon temps!

Join Date: Feb 2003

Posts: 14194
Share

Post
#4

01-17-2005, 01:16 PM

Originally posted by pradaboy

Thanks Stuart, it got me worried coz this did not happen before and I thought someone was out to hack me. If my firewall tells me the IP could I trace it somehow?

The fact that your firewall is telling you about it means that the scan was unsuccessful. Be careful using "traceback" type tools that may be in your firewall program, they can confirm your existence when previously the person scanning had no clue your computer was there.

.
Comment
StuartD

Sofa King Band

Join Date: Jul 2002

Posts: 29903
Share

Post
#5

01-17-2005, 01:18 PM

Originally posted by mardigras

The fact that your firewall is telling you about it means that the scan was unsuccessful. Be careful using "traceback" type tools that may be in your firewall program, they can confirm your existence when previously the person scanning had no clue your computer was there.

This is true.

This is me on facebook
This is me on twitter
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#6

01-17-2005, 01:25 PM

Originally posted by mardigras

The fact that your firewall is telling you about it means that the scan was unsuccessful. Be careful using "traceback" type tools that may be in your firewall program, they can confirm your existence when previously the person scanning had no clue your computer was there.

I have no traceback option in my firewall, but I am interested to know who or what's behind the scanning IP

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment
sumphatpimp

Confirmed User

Join Date: Aug 2002

Posts: 5235
Share

Post
#7

01-17-2005, 01:30 PM

go here, insert the ip then hit search
Comment
mardigras

Bon temps!

Join Date: Feb 2003

Posts: 14194
Share

Post
#8

01-17-2005, 01:46 PM

If you're using ZoneAlarm, here's a tool that offers extended analysis of your logs and has lookup and backtrace features

http://visualize.phenominet.com/visu...visualzone.htm

.
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#9

01-17-2005, 02:02 PM

Originally posted by mardigras

If you're using ZoneAlarm, here's a tool that offers extended analysis of your logs and has lookup and backtrace features

http://visualize.phenominet.com/visu...visualzone.htm

no actually I use Bullguard (BullGuard.com), it's not very wellknown but it is an excellent piece of sotware... at least better than any Norton or McAfee package

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment
KMR Stitch

I am cool

Join Date: Jul 2003

Posts: 14494
Share

Post
#10

01-17-2005, 02:07 PM

I love it when Norton says ICMP PING/SCAN Or hack attemped has come from ip address 127.0.0.1

I am like WTF.. Shut up stupid firewall :-x
Comment
Basic_man

Programming King Pin

Join Date: Oct 2003

Posts: 27360
Share

Post
#11

01-17-2005, 02:09 PM

Maybe you can blacklist the IP.. ! :D

UUGallery Builder - automated photo/video gallery plugin for Wordpress!
Stop looking! Checkout Naked Hosting, online since 1999 !
Comment
Dalai lama

Strength and Honor

Join Date: Jul 2004

Posts: 16540
Share

Post
#12

01-17-2005, 02:10 PM

nothing to be worried about

A program you can trust.
Gallerybooster Run multiply TGPs of 1 script
Comment
GeorgeK

Confirmed User

Join Date: Dec 2003

Posts: 423
Share

Post
#13

01-17-2005, 02:12 PM

Assuming you're on a cable modem or DSL, it is best to get a hardware-based router, and then place that between your computer and the internet. You'd be able to also share the connection. Assuming the router is setup properly, those scans would be of the router, and not your PC. A router can be had for under $50 these days.

You can do a quick scan of your PC from the internet via "Shields Up" at:

http://www.grc.com/

On my router, all ports are closed, so the scan shows no vulnerabilities.

I buy good domain names. Send lists to George (at) LOFFS.com
Comment
mardigras

Bon temps!

Join Date: Feb 2003

Posts: 14194
Share

Post
#14

01-17-2005, 02:32 PM

Originally posted by pradaboy

no actually I use Bullguard (BullGuard.com), it's not very wellknown but it is an excellent piece of sotware... at least better than any Norton or McAfee package

I learned how to format and reinstall courtesy of Norton

.
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#15

01-17-2005, 02:33 PM

Originally posted by GeorgeK

Assuming you're on a cable modem or DSL, it is best to get a hardware-based router, and then place that between your computer and the internet. You'd be able to also share the connection. Assuming the router is setup properly, those scans would be of the router, and not your PC. A router can be had for under $50 these days.

You can do a quick scan of your PC from the internet via "Shields Up" at:

http://www.grc.com/

On my router, all ports are closed, so the scan shows no vulnerabilities.

Thanks for the url, I'm gonna scan right away

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#16

01-17-2005, 02:35 PM

Originally posted by mardigras

I learned how to format and reinstall courtesy of Norton

haha I know exactly what you mean! Amazing how crappy software compensated by a big marketing budget make you the market leader.

Oh hell what am I talking about... just look at the OS I'm running

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment
pradaboy

sell me your banners

Join Date: Dec 2003

Posts: 12931
Share

Post
#17

01-17-2005, 02:47 PM

Originally posted by GeorgeK

Assuming you're on a cable modem or DSL, it is best to get a hardware-based router, and then place that between your computer and the internet. You'd be able to also share the connection. Assuming the router is setup properly, those scans would be of the router, and not your PC. A router can be had for under $50 these days.

You can do a quick scan of your PC from the internet via "Shields Up" at:

http://www.grc.com/

On my router, all ports are closed, so the scan shows no vulnerabilities.

great I'm all covered, thanks for the link again!

Media Buyer - Sell me your traffic!
FREE to register domains...
Better than 99% of the crap sold here!
Comment

Previous template Next

Working...