Port Scanning

Page 1 of 2 12 LastLast

  1. Posts : 6,618
    W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
       #1

    Port Scanning


    I had a series of port scans this evening, which I determined were done by my cable provider. Is there any legitimate reason why this needs to be done?
    Attached Thumbnails Attached Thumbnails Port Scanning-port-scan.jpg  
      My Computer


  2. Posts : 3,139
    Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
       #2

    I think (it's possible) ISPs can search for torrents.
      My Computer


  3. Posts : 6,618
    W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
    Thread Starter
       #3

    Maybe, but I just checked and all of the ports listed are unassigned, except 3 that are dynamic and or private, with no further description given. The only torrent that I ever use is 8901, when using TVU Player, so the others appear to be unrelated.
      My Computer


  4. Posts : 3,139
    Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
       #4

    Which ports were checked?
      My Computer


  5. Posts : 6,618
    W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
    Thread Starter
       #5

    If you click on the screenshot in my OP, you will see most of them listed in the Attack Type column.
      My Computer


  6. Posts : 2,009
    Windows 7 Ultimate x86
       #6

    it's almost impossible to read if you don't have a zoom function

    44530, 47090, 47346, 47602
    48882, 49650, 49906, 49394
    12481, 12737, 12993, 13246

    Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
    Those Portscans aren't run by Cox themselves but by someone who has his account with Cox just like you.
    Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves

    The second Block 94.0.0.0 - 94.255.255.255 is from GB and is assigned to VirginMedia.net
    Apparently a UK-ISP

    I don't recognize any of those ports. so I assume, somebody plays with a script and doesn't really know what they're doing
    -DG
    Last edited by SledgeDG; 12 Oct 2010 at 21:26.
      My Computer


  7. Posts : 3,139
    Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
       #7

    I agree. The ports are unassigned.

    http://www.iana.org/assignments/port-numbers

    Don't know what they could be looking for.
      My Computer


  8. Posts : 6,618
    W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
    Thread Starter
       #8

    SledgeDG said:
    it's almost impossible to read if you don't have a zoom function

    44530, 47090, 47346, 47602
    48882, 49650, 49906, 49394
    12481, 12737, 12993, 13246

    Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
    Those Portscans aren't run by Cox but by someone who has his account with Cox just like you.
    Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves
    Hmm, I ran Sam Spade on the IPs and they only pointed to Cox. If it were another account holder, wouldn't it point to him, rather than just Cox?
      My Computer


  9. Posts : 3,139
    Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
       #9

    seekermeister said:
    SledgeDG said:
    it's almost impossible to read if you don't have a zoom function

    44530, 47090, 47346, 47602
    48882, 49650, 49906, 49394
    12481, 12737, 12993, 13246

    Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
    Those Portscans aren't run by Cox but by someone who has his account with Cox just like you.
    Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves
    Hmm, I ran Sam Spade on the IPs and they only pointed to Cox. If it were another account holder, wouldn't it point to him, rather than just Cox?
    What if you ran Sam Spade on your IP. What would it show? It would not show a user name.
      My Computer


  10. Posts : 3,139
    Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
       #10

    Try this with your ip address:

    WHOIS Lookup for Domain & IP Address Research | Whois Source

    and the found ip.

    Is it similar?
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:02.
Find Us