Results 1 to 4 of 4

Thread: intrusions from different remote addresses targetting same ports

  1. #1
    zark Guest

    Default intrusions from different remote addresses targetting same ports

    hello,

    i hope someone can provide me with some answers regarding this.
    for the past one day, i've noticed that my free zonealarm has been
    blocking hundreds of connection attempts from different remote addresses
    on tcp/udp ports 18874 and 16523.
    i'm quite sure that i've not opened up those ports for any known
    applications to listen to as i've checked all the programs that require
    internet access and my router's port forwarding to make sure.
    even when no other programs are running and i'm just idly surfing the internet,
    the connections keep coming in.
    i don't understand why all these addresses are targetting those two ports.
    i hope it's nothing bad.
    help please.

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm (Free)
    Software Version:6.0

  2. #2
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: intrusions from different remote addresses targetting same ports



    http://isc.sans.org/port_details.php?port=18874

    http://isc.sans.org/port_details.php...=N&days=40

    Both of these ports have been spiking activity, so its probably nothing you are doing. Just something out there.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

  3. #3
    abexman Guest

    Default Re: intrusions from different remote addresses targetting same ports

    I have had the same issue but with hundreds (every second or so) of attempts to access port 4674. It's been going on at least all day, 1000 connections in last 4 hours. 527,000 connections total. Not sure what to do. All medium severity.

    Andrew

  4. #4
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: intrusions from different remote addresses targetting same ports

    Is it from the same IP address? everytime?
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •