port 2869 scan

Discussion in 'other firewalls' started by rewe, Dec 22, 2004.

Thread Status:
Not open for further replies.
  1. rewe

    rewe Registered Member

    Joined:
    Dec 22, 2004
    Posts:
    2
    I use xp sp2 and checpoint firewall on on computer with two netxork cards using same ip range. 10.0.0.0

    I have a dsl connection on the same range

    my firewall logs something like a slow port scan on port 2869 incoming from ip source internal modem adress (high port tcp) destination my ip adress of internet connection.
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi rewe

    ... and welcome to Wilders :)

    SSDP Discovery Service (UPnP) event notification starting with XP SP2 will also use TCP port 2869 in addition to TCP 5000 and UDP 1900. If your modem has this enabled, that could be what you are seeing.

    Regards,

    CrazyM
     
  3. rewe

    rewe Registered Member

    Joined:
    Dec 22, 2004
    Posts:
    2
    I disabled the pnp features on my modem and everything seems to work fine, no more alerts ...Just thank you for your nice advice.

    I never could imagine that the modem with à buiilt-in firewall could have pnp enabled by default...
     
  4. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Good to hear it resolved your issue and your welcome :)

    What is enabled by default in some hardware devices and software always keeps computing interesting ;)

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.