PDA

View Full Version : hotspot and scan port


dorgane
September 10th, 2011, 07:26 PM
hi every body

every til
me i am connect at a free hotspot. today i connect at another, now i have many alert :

11/09/2011 01:22:55 Detected Port Scanning attack 221.1.220.185:12200 78.250.217.123:8123 TCP
11/09/2011 01:21:56 Detected Port Scanning attack 58.218.199.147:12200 78.250.217.123:8088 TCP
11/09/2011 01:19:21 Detected Port Scanning attack 31.7.59.152:12200 78.250.217.123:1080 TCP
11/09/2011 01:12:08 Detected Port Scanning attack 69.162.125.43:12200 78.250.217.123:8123 TCP
11/09/2011 00:55:37 Detected Port Scanning attack 31.7.59.152:12200 78.250.196.193:8085 TCP
11/09/2011 00:51:12 Detected Port Scanning attack 69.162.125.43:12200 78.250.196.193:8123 TCP
11/09/2011 00:50:40 Detected Port Scanning attack 221.1.220.185:12200 78.250.196.193:8085 TCP
11/09/2011 00:42:13 Detected Port Scanning attack 221.194.46.176:12200 78.250.196.193:6588 TCP
11/09/2011 00:41:43 Detected Port Scanning attack 31.7.59.152:12200 78.250.196.193:1080 TCP
11/09/2011 00:38:06 Detected Port Scanning attack 221.1.220.185:12200 78.250.196.193:9090 TCP

it is dangerous or not?
firewall is interactive on ess5, computer clean and update is ok

thank you

dorgane
September 12th, 2011, 02:39 PM
what it ? :blink:

229129

IP address: 41.208.241.26
Host name: wbs-41-208-241-26.wbs.co.za

41.208.241.26 is from South Africa(ZA) in region Southern Africa

http://network-tools.com/default.asp?prog=lookup&host=41.208.241.26

agoretsky
September 12th, 2011, 08:00 PM
Hello,

Without knowing for certain, I can only guess that someone was running a program at the hotspot on the IP address you are now assigned which made use of many inbound network connections. Perhaps a game or some other type of P2P app. These are probably the result of other computers still trying to connect to that other computer. That is, of course, just a guess on my part.

Regards,

Aryeh Goretsky