Results 1 to 4 of 4

Thread: Port Scans

  1. #1
    mdbilski Guest

    Default Port Scans

    Has anyone seen an increase in port scan alerts?
    Does svhost or other server allowance requests affect ZA's ability to protect from these scans?


    Operating System:Windows XP Pro
    Software Version:7.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Port Scans

    Port scan coming from what IPs?
    Which of your local ports are scanned?
    What protocol is involved?
    Please check your logs in the Log Viewer to obtain these details and please post the information.
    Oldsod.
    Best regards.
    oldsod

  3. #3
    mdbilski Guest

    Default Re: Port Scans

    This one is Rating=High
    Description




    Packet sent from 219.153.65.88 (TCP Port 12200) to 24.154.176.231 (TCP Port 1080) was blocked
    Rating









    High
    Date / Time




    2008/10/20 21:40:54-4:00 GMT
    Type











    Firewall
    Protocol







    TCP (flags:S)
    Program









    Source IP






    219.153.65.88:12200
    Destination IP

    24.154.176.231:1080
    Direction






    Incoming
    Action Taken



    Blocked
    Count










    1
    Source DNS





    88.65.153.219.broad.cq.cq.dynamic.163data.com.cn
    Destination DNS
    ...
    This one is typical, like a dozen/day
    222.180.37.14 ZA tells me that port 1080 is the target

  4. #4
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Port Scans

    Tthank you very much.
    I now understand.
    I recently gave this reply in another thread and it is very similar to your situation:

    http://forum.zonelabs.org/zonelabs/b...ssage.id=20024

    Oldsod.
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •