Port Scans from my ISP Range

Discussion in 'Computer Security' started by Chris H., Jan 19, 2005.

  1. Chris H.

    Chris H. Guest

    Hello,

    I have been receiving port scans lately from my ISP range. I am on dial-up
    by the way. Below is a sample of the port scans that I have been getting.

    FWIN,2005/01/18,22:42:34 -8:00 GMT,204.244.70.226:4213,204.244.70.33:135,TCP
    (flags:S)
    FWIN,2005/01/18,21:49:42 -8:00 GMT,204.244.70.226:4190,204.244.70.34:135,TCP
    (flags:S)
    FWIN,2005/01/18,21:54:38 -8:00 GMT,204.244.70.226:1674,204.244.70.34:135,TCP
    (flags:S)
    FWIN,2005/01/18,21:42:52 -8:00 GMT,204.244.70.226:1042,204.244.70.34:135,TCP
    (flags:S)
    FWIN,2005/01/18,01:51:54 -8:00 GMT,204.244.70.21:1264,204.244.70.33:445,TCP
    (flags:S)
    Chris H., Jan 19, 2005
    #1
    1. Advertising

  2. Chris H. wrote:

    > Hello,
    >
    > I have been receiving port scans lately from my ISP range. I am on
    > dial-up
    > by the way. Below is a sample of the port scans that I have been getting.
    >
    > FWIN,2005/01/18,22:42:34 -8:00
    > GMT,204.244.70.226:4213,204.244.70.33:135,TCP (flags:S)
    > FWIN,2005/01/18,21:49:42 -8:00
    > GMT,204.244.70.226:4190,204.244.70.34:135,TCP (flags:S)
    > FWIN,2005/01/18,21:54:38 -8:00
    > GMT,204.244.70.226:1674,204.244.70.34:135,TCP (flags:S)
    > FWIN,2005/01/18,21:42:52 -8:00
    > GMT,204.244.70.226:1042,204.244.70.34:135,TCP (flags:S)
    > FWIN,2005/01/18,01:51:54 -8:00
    > GMT,204.244.70.21:1264,204.244.70.33:445,TCP (flags:S)


    OK port 135 is:
    Microsoft's DCOM (Distributed, i.e. networked, COM) Service Control Manager
    (also known as the RPC Endpoint Mapper) uses this port in a manner similar
    to SUN's UNIX use of port 111. The SCM server running on the user's
    computer opens port 135 and listens for incoming requests from clients
    wishing to locate the ports where DCOM services can be found on that
    machine.

    Port 445 is used by Microsoft for a data services...

    Yes, you are probably being scanned...so what is your question?

    -- Michael
    Michael J. Pelletier, Jan 19, 2005
    #2
    1. Advertising

  3. Chris H.

    donnie Guest

    On Tue, 18 Jan 2005 22:52:45 -0800, "Chris H."
    <> wrote:

    >Hello,
    >
    >I have been receiving port scans lately from my ISP range. I am on dial-up
    >by the way. Below is a sample of the port scans that I have been getting.
    >
    >FWIN,2005/01/18,22:42:34 -8:00 GMT,204.244.70.226:4213,204.244.70.33:135,TCP
    >(flags:S)
    >FWIN,2005/01/18,21:49:42 -8:00 GMT,204.244.70.226:4190,204.244.70.34:135,TCP
    >(flags:S)
    >FWIN,2005/01/18,21:54:38 -8:00 GMT,204.244.70.226:1674,204.244.70.34:135,TCP
    >(flags:S)
    >FWIN,2005/01/18,21:42:52 -8:00 GMT,204.244.70.226:1042,204.244.70.34:135,TCP
    >(flags:S)
    >FWIN,2005/01/18,01:51:54 -8:00 GMT,204.244.70.21:1264,204.244.70.33:445,TCP
    >(flags:S)
    >

    #########################
    The next time you get them, open a command prompt and run:
    nbtstat -A ipaddress
    See if you can get the NetBIOS table. Chances are you'll get Host Not
    Found but try it anyway.
    It's no bug deal if someone scans you. That doesn't mean that they
    can compromise your system.
    donnie.
    donnie, Jan 20, 2005
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Weiguang Shi
    Replies:
    1
    Views:
    4,447
  2. James Drake

    Sick of port scans

    James Drake, Apr 12, 2004, in forum: Computer Support
    Replies:
    2
    Views:
    444
    -= Hawk =-
    Apr 12, 2004
  3. Daniel Damlin

    scans on port 1910, why?

    Daniel Damlin, Jan 27, 2004, in forum: Computer Security
    Replies:
    0
    Views:
    478
    Daniel Damlin
    Jan 27, 2004
  4. Steve-O

    Port 1840 Scans

    Steve-O, Mar 2, 2004, in forum: Computer Security
    Replies:
    2
    Views:
    1,310
    David Norris
    Mar 2, 2004
  5. Port scans. What are these?

    , Oct 18, 2005, in forum: Computer Security
    Replies:
    7
    Views:
    917
    ROBERT S AMP BA Drake
    Oct 23, 2005
Loading...

Share This Page