Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Port Scanning

12 Oct 2010   #11
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

Okay, the bottom line is whether there is some way to pinpoint the actual person performing the attack, or at least get an idea of what he is trying to do?


My System SpecsSystem Spec
.

12 Oct 2010   #12
SledgeDG

Windows 7 Ultimate x86
 
 

Especially since ISPs started to give out Dynamic IPs ther is no way of knowing, what user is behind such a scan. You would need the timestamp log from the ISPs in question.

Sam Spade..I used to have that under XP...(out of sight out of mind) gotta go and d/l it again.
Thanks for reminding me

-DG
My System SpecsSystem Spec
12 Oct 2010   #13
SledgeDG

Windows 7 Ultimate x86
 
 

To pinpoint, what they're really up to, you need a list of ports used by Trojans/Bots and other malware..I used to have such lists...maybe I'll find them again
My System SpecsSystem Spec
.


12 Oct 2010   #14
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 

Agreed. You need to contact your ISP and let them know the date and time your pc was scanned. The person doing it might even be ignorant of the fact - if a rogue virus or malware is behind it. But they need to know.
My System SpecsSystem Spec
12 Oct 2010   #15
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

Quote   Quote: Originally Posted by Lemur View Post
Try this with your ip address:

WHOIS Lookup for Domain & IP Address Research | Whois Source

and the found ip.

Is it similar?
I ran both of the IPs involved by using your link, and all that it gives is a much more detailed list of data than Sam Spade did. However, it appears that it is not the local Cox office doing it, but the one in Atlanta, GA.
My System SpecsSystem Spec
12 Oct 2010   #16
pparks1

Windows 7 Ultimate x64
 
 

I'm almost positive this is not your ISP, but as others said somebody on their network.

As to why they do it...who knows? Maybe they are script kiddies, maybe their boxes have been compromised by somebody else (most likely) and they are scanning.

I often have a Linux box taking incoming requests from the net and you can see truckloads of users trying to run Windows scripts against my Linux box. They simply scan a range of IP's and then thing they are really doing something fancy. You can tell they are running scripts as it just cycles through test, after test, after test...even though it should be obvious right from the start that they aren't going to gain access to cmd on my host.
My System SpecsSystem Spec
13 Oct 2010   #17
SledgeDG

Windows 7 Ultimate x86
 
 

Right...when I used Comodo Firewall I got swamped with those Attack messages.
At first I was all concerned and tried to investigate every case.
Then I got defensive and crashed their comp through a by then unpatched loophole in winsock and don't you know...most of them were gone for a reboot so you knew those were script kiddies on a windows box.
Now I run the Windows firewall (in addition to my router fw) and don't worry about them anymore.
Obviously your safe since your Firewall caught/stopped the event.
Basically it's just "white noise" on the cable...not worth losing any sleep over.
The dangerous ones are those, your firewall doesn't tell you about

-DG
My System SpecsSystem Spec
Reply

 Port Scanning




Thread Tools





Similar help and support threads
Thread Forum
router not passing port scan after opening port
1. Is this a wired or wireless connection issue? wireless 2. Who is your Internet Service Provider (ISP)? Charter 3. What type of Broadband connection are you using? Cable 4. What is the exact Make and Model of your Modem, Router or Modem/Router Combo Netgear WNDR3800, Cisco DPC3008
Network & Sharing
Port forwarding(redirecting), NOT(!) port opening
Hi. I was tired when 50th result in google named "port forwarding" was actually question how to open port. To be specific, I would like windows 7 to do the same what this program does. Which means forward port... NOT fowarding port on my router NOT opening port(allow connections) in...
Network & Sharing
DVI port on monitor is stuck res of 640x480 VGA port works fine
I have dual monitors......my primary display monitor is a Chimei CMV223D My secondary display monitor is an Acer AL1916W. My graphics card is an HD ATI Radeon 5800. PROBLEM: My primary display monitor which usually has a display resolution of 1680x1050 is currently stuck on 640x480 and...
General Discussion
Port Scanning attack detected on ESET
Hi All. My colleague and I each have a windows 7 machine on a LAN. Now I have ESET NOD32 installed and it frequently shows me that his PC's internal IP address is scanning my ports - "Detected Port scanning attack from 192.168.0.8". Now I checked the log files in ESET and it says everytime that...
System Security
Detected port scanning attack?
Im using eset smart security 5 and im getting this message "Detected port scanning attack" Is this a serious threats or false alarm? If it is a serious threat how to neutralize it? Regards
System Security
Port Scanning
Hey does anyone know of some good software for testing my firewall against port scanning etc? Pretty simple question here :p Cheers,
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:36.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App