• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Router log and port scans

Opossum

Member
I just installed WallWatcher about 2 weeks ago to view my router log file from my Linksys router. I get lots of port scans. In the a 2 day log file I have 1981 probes. Some interesting things are the IP's. I am using NeoTrace to track the IP's and the most active are:
201 hits from IP 218.15.192.64 (Unknown).
157 hits from IP 207.68.171.232 (Microsoft).
117 hits from IP 168.143.107.163 (Unknown).
106 hits from IP 64.156.39.12 (dialup-64.156.39.12.dial1.denver1.level3.net).
105 hits from IP 200.152.97.160 (PROXYBLOCKER.COM.BR).
58 hits from IP 207.68.172.245 (Microsoft).
37 hits from IP 12-209-135-1 ( 12-209-135-1.client.attbi.com).
The most active ports are: 80, 1025, 1026, 1027, 1028, 57952, 57333.
I am no network expert but am hoping someone could give me a hand. One should I be concerned about all these probes. Two is there anything I can do about them. They are all being blocked. Three why would I be getting probed from Microsoft? The Microsoft ones are trying post 80 but requesting local ports 1554 to 2919 in a short amount of time.
Anyone got any ideas?

Thanks
Opossum
 
Imagine some one recording the License plates of all the cars that are behind him on the Interstate and complaining to the police about them.

Yeah there is a lot of noisy traffic on the Internet and some of it is ?behind? you knocking on you door.

That is one of the reasons why every one on broadband should use a Cable/DSL Router even if they do not have a Network.
 
Back
Top