Router log and port scans

Opossum

Member
Oct 10, 1999
177
0
0
I just installed WallWatcher about 2 weeks ago to view my router log file from my Linksys router. I get lots of port scans. In the a 2 day log file I have 1981 probes. Some interesting things are the IP's. I am using NeoTrace to track the IP's and the most active are:
201 hits from IP 218.15.192.64 (Unknown).
157 hits from IP 207.68.171.232 (Microsoft).
117 hits from IP 168.143.107.163 (Unknown).
106 hits from IP 64.156.39.12 (dialup-64.156.39.12.dial1.denver1.level3.net).
105 hits from IP 200.152.97.160 (PROXYBLOCKER.COM.BR).
58 hits from IP 207.68.172.245 (Microsoft).
37 hits from IP 12-209-135-1 ( 12-209-135-1.client.attbi.com).
The most active ports are: 80, 1025, 1026, 1027, 1028, 57952, 57333.
I am no network expert but am hoping someone could give me a hand. One should I be concerned about all these probes. Two is there anything I can do about them. They are all being blocked. Three why would I be getting probed from Microsoft? The Microsoft ones are trying post 80 but requesting local ports 1554 to 2919 in a short amount of time.
Anyone got any ideas?

Thanks
Opossum
 

JackMDS

Elite Member
Super Moderator
Oct 25, 1999
29,553
430
126
Imagine some one recording the License plates of all the cars that are behind him on the Interstate and complaining to the police about them.

Yeah there is a lot of noisy traffic on the Internet and some of it is ?behind? you knocking on you door.

That is one of the reasons why every one on broadband should use a Cable/DSL Router even if they do not have a Network.
 

skyking

Lifer
Nov 21, 2001
22,786
5,941
146
What Jack said. Unless it gets thru, forget about it. If it gets thru, do something to block it.