Author Topic: Port scan  (Read 3234 times)

0 Members and 1 Guest are viewing this topic.

RV01

  • Guest
Port scan
« on: December 06, 2004, 05:03:05 PM »
I would like to ask what exactly Port scan is. Since I installed my personal firewall I keep receiving notifications that somebody is scanning my computer for example TCP Ports 3127, 6129, 139, 2745,135 1025 and 445  are scanned. What fears me is that I don’t know if my privacy is violated. I would appreciate it if I would be provided with an answer and I would like to thank for any help in advance.

lee16

  • Guest
Re:Port scan
« Reply #1 on: December 06, 2004, 05:15:21 PM »
RV01

A port scan is a software program used to send a series of messages to each port on a computer, one at a time, to see which ports are open. This can be used by network administrators to test system security.
Also port scanning gives a hacker an idea where to probe for weaknesses to access the system, and if possible cause some damage to the system.

Quote
TCP Ports 3127, 6129, 139, 2745,135 1025 and 445

Basicly something is scanning your TCP ports, the numbers are the exact ports being scanned, there are around 65000 ports in total.

So a question, what firewall are you using?

You can test to see how well your firewalls working at the link below, once your there if you look down the left hand side of the page you can change the options, ideally your ports will be stealthed.

http://scan.sygatetech.com/pretcpscan.html



--lee

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Port scan
« Reply #2 on: December 06, 2004, 05:18:27 PM »
For a defination about port(s) look here : http://212.204.166.18/smf/index.php?topic=2.msg46#msg46

The message you are getting from your firewall is not exactly correct. Especially when it comes to ports 135 and 445. Those are mostly used currently by the latest Sobar worm. Because the worm attacks your system on those ports.

The messages you are getting have nothing to do with a port scan. If it really was a port scan, it would be only those ports that where scanned, but the entire range. The messages only say that something or someone has tried to connect to your system on that port and that is was blocked.

Sinc you only recently installed a firewall, I suggest you click on the link in my signature, visit the "malware removal" section and make sure your system is clean.
« Last Edit: December 06, 2004, 05:31:14 PM by Eddy »

RV01

  • Guest
Re:Port scan
« Reply #3 on: December 06, 2004, 09:38:53 PM »
My firewall is sygate.
I have ad-aware se personal .Does this protect me against maleware?
Thanks for the help

lee16

  • Guest
Re:Port scan
« Reply #4 on: December 06, 2004, 09:44:17 PM »
Quote
My firewall is sygate.

The link i gave above is sygates firewall scanner, you can check your firewall there if you wish.

Quote
I have ad-aware se personal .Does this protect me against malware?

yes, but no one program can catch every malware there is, there are others in eddys signature (above) that can be useful such as 'spybot' and 'hijackthis', there are other stuff on there that can help you.

--lee
« Last Edit: December 06, 2004, 09:45:07 PM by lee16 »

RV01

  • Guest
Re:Port scan
« Reply #5 on: December 06, 2004, 09:50:35 PM »
Ok I will do so.
Thanks a lot