port scans

[naeblis]

Hi, I'm hoping to get some help from some people more knowledgeble than me. Over about the past 10 days i hjave had numerous port scans from china and kora it seems. All blocked by my firewall, as far as i can tell. They have been coming about 2-3 day on avg. Not sure what this means or what to do about it. Any advise appreciated.

[meneer]

This is internet. Using a firewall, you will notice it. Since your firewall detects it, you are protected. So don't fear.

Make sure the firewall is configured correctly, by visiting grc.com (do a shields up test) or pcflank.com. When these sites have no comments, you're safe. If not, fix your system settings or report back here.

[naeblis]

-{ Quote: "This is internet. Using a firewall, you will notice it. Since your firewall detects it, you are protected. So don't fear.

Make sure the firewall is configured correctly, by visiting grc.com (do a shields up test) or pcflank.com. When these sites have no comments, you're safe. If not, fix your system settings or report back here." }-

Thanks for the reply. I ran those tests and all was good, but still i am concerned. Never had port scan attempt before, now 100 in 10 days. Why now. Had like 3 attempts in past 2 hours.

[bigc73542]

-{ Quote: "Thanks for the reply. I ran those tests and all was good, but still i am concerned. Never had port scan attempt before, now 100 in 10 days. Why now. Had like 3 attempts in past 2 hours." }-
Those port scans are really pretty common. As long as your firewall is blocking there is not much to worry about.


thanks bigc

[CrazyM]

Hi naeblis

... and welcome to Wilders :)

-{ Quote: "Never had port scan attempt before, ..." }-

Where have you been hiding not to have seen any port scans/firewall events being logged?

-{ Quote: "... now 100 in 10 days. Why now. Had like 3 attempts in past 2 hours." }-

Everyone will experience different levels of this acitivity, but it is not unusual for me to see anywhere from several hundred to over a thousand in a day.

One site you can check out that tracks trends is the Internet Storm Center (http://isc.incidents.org/) if you interested in what everyone else is seeing.

Regards,

CrazyM

[CrazyM]

The attached sample of the amount of blocked inbound traffic I might normally see is from a database from last month covering 3 days. Total of 2503 events.

Regards,

CrazyM

[shelobo]

-{ Quote: "The attached sample of the amount of blocked inbound traffic I might normally see is from a database from last month covering 3 days. Total of 2503 events.

Regards,

CrazyM" }-
As Long as your f/w seems to be blocking them,shouldnt worry,some of the scans could be what some call "traffic" from sites that you have been to or just a lotta noise from net.