Checking Port Scanning

To talk on Icrontic, just register!

It only takes 30 seconds.

Have an account? Sign in:

Reply to Discussion

Options

profdlp

Off To The Gym

21,407 Posts

2 Jul 2003, 9:14am

I have a Linksys router (BFSR41) attached to my cable modem. Lot's of time I see the internet activity light blinking like mad when no one is actively using the net. The only lights blinking are the internet activity light on the cable modem and the WAN light on the Linksys.

I assume this means that something (external) is scanning my ports. Am I right? What can I do to find out who/what is doing this. There are no computers in the DMZ.

Prof

__________________ ---Prof

**********************************
If it doesn't come naturally, leave it
- Al Stewart
**********************************
RIP Short-Media

Reply with Quote

TBonZ

Veteran Icrontian

3,450 Posts

2 Jul 2003, 12:01pm

You may be getting snooped on but as long as you have "accept no connections" enabled in the router setup, you should be ok.

Also, some ISP's ping you themselves, does this happen frequently and for long period's of time? Have you done a sweep of your system(s) with an adaware type app lately?

__________________ SM23_Keith_Whitsitt - FOLD4LIFE
Q8200@3.22Ghz
Asus P5Q-E
4Gb Corsair Dominator PC8500
Asus EAH4870/HTDI
OCZ Gladiator HS/F
Corsair TX650W
Antec 900 Case

Reply with Quote

Enverex

~-+-~

5,852 Posts

2 Jul 2003, 3:01pm

There are also programs like Windows Time running that update and sync your clock every so often.

Also other auto-updaters could be arsing about, but, it could be portscans, my router keeps getting them all the time.

NS

__________________ RetroTracks - Classic Computer and Game Music

Reply with Quote

hypermood

Go Jackets!

166 Posts

2 Jul 2003, 3:33pm

If you want to see what is going on (TCP/UDP/ICMP wise), just login to the router and view the access logs. It will show you all incoming and outgoing traffic. It keeps a fairly good sized history.

Note that you will see some activity that the router will not log in the form of ARP requests from the network. ARP (Address Resolution Protocol) is used by you network provider's router to determine who has what IP addresses and the MAC address that it is bound to.

__________________ DFI NF4 SLI-DR Expert (BIOS 04/06/2006)
AMD Athlon 64 X2 4800+ Toledo (250x10)
PDC2G3500LLK 2GB Dual Channel (DDR500 2.68V)
Palit 8800GT SONIC 1GB PCI-E x16 (650/1900)
Seagate 160GB x 2 SATA
Plextor PX-716 DVD+/-RW DL IDE
Pioneer DVR-112D DVD+/-RW DL IDE Labelflash
OCZ ModStream 520W
[folding_sig1]

Reply with Quote

		Icrontic Forums > Tech: Software > Networking & Security
Checking Port Scanning

Jump to

This Thread	Search this Thread
Print Email	Search this Thread: Advanced Search

Username
Password	Forgot?
Remember me