|
|
 | | From: | chrisdhecker at uniserve.com | | Subject: | Port Scans from my ISP range | | Date: | 18 Jan 2005 23:42:27 -0800 |
|
|
 | Hello,
I have been receiving port scans from within my IP range. I have a
dynamic IP. Does anyone have any ideas why I am receiving these port
scans. Below is a sample of my Zone Alarm log files:
FWIN,2005/01/18,22:42:34 -8:00
GMT,204.244.70.226:4213,204.244.70.33:135,TCP
(flags:S)
FWIN,2005/01/18,21:49:42 -8:00
GMT,204.244.70.226:4190,204.244.70.34:135,TCP
(flags:S)
FWIN,2005/01/18,21:54:38 -8:00
GMT,204.244.70.226:1674,204.244.70.34:135,TCP
(flags:S)
FWIN,2005/01/18,21:42:52 -8:00
GMT,204.244.70.226:1042,204.244.70.34:135,TCP
(flags:S)
FWIN,2005/01/18,01:51:54 -8:00
GMT,204.244.70.21:1264,204.244.70.33:445,TCP
(flags:S)
|
|
| | From: | Systemguy | | Subject: | Re: Port Scans from my ISP range | | Date: | Wed, 19 Jan 2005 08:27:23 -0500 |
|
|
|
wrote in message
news:1106120546.977547.247560@f14g2000cwb.googlegroups.com...
> Hello,
>
> I have been receiving port scans from within my IP range. I have a
> dynamic IP. Does anyone have any ideas why I am receiving these port
> scans. Below is a sample of my Zone Alarm log files:
>
> FWIN,2005/01/18,22:42:34 -8:00
> GMT,204.244.70.226:4213,204.244.70.33:135,TCP
> (flags:S)
> FWIN,2005/01/18,21:49:42 -8:00
> GMT,204.244.70.226:4190,204.244.70.34:135,TCP
> (flags:S)
> FWIN,2005/01/18,21:54:38 -8:00
> GMT,204.244.70.226:1674,204.244.70.34:135,TCP
> (flags:S)
> FWIN,2005/01/18,21:42:52 -8:00
> GMT,204.244.70.226:1042,204.244.70.34:135,TCP
> (flags:S)
> FWIN,2005/01/18,01:51:54 -8:00
> GMT,204.244.70.21:1264,204.244.70.33:445,TCP
> (flags:S)
>
The scanning system within your IP range is probably infected with
a virus and is looking for other systems to infect. Pass the information
on to your ISP and they will look into it.
Regards,
Systemguy
|
|
| | From: | Arthur Hagen | | Subject: | Re: Port Scans from my ISP range | | Date: | Wed, 19 Jan 2005 08:50:15 -0500 |
|
|
| Systemguy wrote:
> wrote in message
> news:1106120546.977547.247560@f14g2000cwb.googlegroups.com...
>> Hello,
>>
>> I have been receiving port scans from within my IP range. I have a
>> dynamic IP. Does anyone have any ideas why I am receiving these port
>> scans. Below is a sample of my Zone Alarm log files:
>>
>> FWIN,2005/01/18,22:42:34 -8:00
>> GMT,204.244.70.226:4213,204.244.70.33:135,TCP
>> (flags:S)
>> FWIN,2005/01/18,21:49:42 -8:00
>> GMT,204.244.70.226:4190,204.244.70.34:135,TCP
>> (flags:S)
>> FWIN,2005/01/18,21:54:38 -8:00
>> GMT,204.244.70.226:1674,204.244.70.34:135,TCP
>> (flags:S)
>> FWIN,2005/01/18,21:42:52 -8:00
>> GMT,204.244.70.226:1042,204.244.70.34:135,TCP
>> (flags:S)
>> FWIN,2005/01/18,01:51:54 -8:00
>> GMT,204.244.70.21:1264,204.244.70.33:445,TCP
>> (flags:S)
>>
>
> The scanning system within your IP range is probably infected with
> a virus and is looking for other systems to infect. Pass the
> information on to your ISP and they will look into it.
>
> Regards,
>
> Systemguy
Or, they are on the same subnet and are simply clicking "Computers Near Me"
in their Network Neighborhood.
Regards,
--
*Art
|
|
|
