Whats This?

06:24 AM

2/7/2007 9:00:48 PM Port scanned 10.32.167.160 TCP(445) 2/7/2007 9:00:48 PM Connection request 10.32.167.160 TCP(445) 2/7/2007 8:51:16 PM Port scanned 10.32.190.251 TCP(445) 2/7/2007 8:51:16 PM Connection request 10.32.190.251 TCP(445) 2/7/2007 8:44:22 PM Port scanned 10.32.144.109 TCP(445) 2/7/2007 8:44:22 PM Connection request 10.32.144.109 TCP(445) 2/7/2007 8:42:04 PM Port scanned 10.32.189.142 TCP(445) 2/7/2007 8:42:04 PM Connection request 10.32.189.142 TCP(445) 2/7/2007 8:39:03 PM Port scanned 10.32.136.201 TCP(445) 2/7/2007 8:39:03 PM Connection request 10.32.136.201 TCP(445) 2/7/2007 8:33:34 PM Port scanned 10.32.172.155 TCP(445) 2/7/2007 8:33:34 PM Connection request 10.32.172.155 TCP(445) 2/7/2007 8:33:12 PM Port scanned 10.32.159.63 TCP(445) 2/7/2007 8:33:12 PM Connection request 10.32.159.63 TCP(445) 2/7/2007 8:30:06 PM Port scanned 10.32.159.250 TCP(445) 2/7/2007 8:30:06 PM Connection request 10.32.159.250 TCP(445) 2/7/2007 8:08:16 PM Port scanned 10.32.187.110 TCP(445) 2/7/2007 8:08:16 PM Connection request 10.32.187.110 TCP(445) 2/7/2007 8:07:50 PM Port scanned 10.32.190.251 TCP(445) 2/7/2007 8:07:50 PM Connection request 10.32.190.251 TCP(445) 2/7/2007 8:02:59 PM Port scanned 10.32.190.42 TCP(445) 2/7/2007 8:02:59 PM Connection request 10.32.190.42 TCP(445) 2/7/2007 7:50:33 PM Port scanned 10.32.159.250 TCP(445) 2/7/2007 7:50:33 PM Connection request 10.32.159.250 TCP(445) 2/7/2007 7:45:19 PM Port scanned 10.32.172.155 TCP(445) 2/7/2007 7:45:19 PM Connection request 10.32.172.155 TCP(445) 2/7/2007 7:37:35 PM Port scanned 10.32.143.29 TCP(445) 2/7/2007 7:37:35 PM Connection request 10.32.143.29 TCP(445) 2/7/2007 7:34:19 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:34:01 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:32:21 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:32:03 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:30:18 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:28:18 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:28:03 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:26:20 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:26:03 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:24:17 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:24:03 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:22:51 PM Port scanned 10.32.172.155 TCP(445) 2/7/2007 7:22:51 PM Connection request 10.32.172.155 TCP(445) 2/7/2007 7:22:17 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:22:03 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:20:25 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:20:02 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:18:18 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:18:08 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:16:19 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:16:04 PM Connection request 207.210.111.10 TCP(1567) 2/7/2007 7:15:19 PM Port scanned 10.32.177.57 TCP(445) 2/7/2007 7:15:19 PM Connection request 10.32.177.57 TCP(445) 2/7/2007 7:14:24 PM Connection request 207.210.111.10 TCP(1559) 2/7/2007 7:11:35 PM Connection request 72.36.159.224 TCP(1372) 2/7/2007 7:09:30 PM Connection request 72.36.159.224 TCP(1372) 2/7/2007 7:07:42 PM Port scanned 10.32.150.177 TCP(445) 2/7/2007 7:07:42 PM Connection request 10.32.150.177 TCP(445) 2/7/2007 7:07:28 PM Connection request 72.36.159.224 TCP(1372)

and more....
..
I use Outpost Firewall And in Attack Detection i found a list of IP and TCP (number)
I'm not Programmer, so.. Can you explain whats this?
TCP(1372)
TCP(445)
TCP(1559) and all number?
this attack dangerous for my system?
I use Win XP as OS
Thx

calum · **Re: Whats This? -** 02-07-2007, 08:14 AM

No these are not dangerous attacks.
They are just automated port scans. They automatically scan computers to find any open ports that they could use to **** into. They happen to everyone and are nothing to be worried about.

You cannot protect yourself from them, because they cause no harm, but if they find open ports then they will alert the person that set them, so that person might try to **** into your computer.

Just make sure that you have no ports open on your computer that you don't need, there are lots of free online self port scans like The Audit My PC Firewall Test.

If there are any open ports that you don't use then you should close them on your firewall.

**Re: Whats This? -** 02-07-2007, 10:54 AM

yeah, what calum say its the good answer..

**Re: Whats This? -** 02-07-2007, 04:41 PM

Quote:

Originally Posted by calum

No these are not dangerous attacks.
They are just automated port scans. They automatically scan computers to find any open ports that they could use to **** into. They happen to everyone and are nothing to be worried about.

You cannot protect yourself from them, because they cause no harm, but if they find open ports then they will alert the person that set them, so that person might try to **** into your computer.

Just make sure that you have no ports open on your computer that you don't need, there are lots of free online self port scans like The Audit My PC Firewall Test.

If there are any open ports that you don't use then you should close them on your firewall.

Thx Calumm.. I was try auditmypc.com and i have a good result Thx

**Re: Whats This? -** 02-08-2007, 01:28 AM

You just have to have a good firewall and htere's no problem...best i've seen so far is zone-alarm, but it has some faults...

weblord · **Re: Whats This? -** 02-08-2007, 01:35 AM

use this tool to see if that's your ip address
http://whois.domaintools.com/10.32.167.160

then another test to do is close your browser and then see if still scans your port, if it does then deny it on your firewall, don't permit it.

if it stops then it must be one of the web sites you're visiting.

**Re: Whats This? -** 02-08-2007, 02:22 AM

Quote:

Originally Posted by weblord

use this tool to see if that's your ip address
http://whois.domaintools.com/10.32.167.160

then another test to do is close your browser and then see if still scans your port, if it does then deny it on your firewall, don't permit it.

if it stops then it must be one of the web sites you're visiting.

I found the IP addess ( all scanner ) is trusted.

Thx for the Url webLord
i see the IP address is trusted
OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 10.0.0.0 - 10.255.255.255
CIDR: 10.0.0.0/8
NetName: RESERVED-10
NetHandle: NET-10-0-0-0-1
Parent:
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information.
Comment:
RegDate:
Updated: 2002-09-12

and i see in attack log, they still Scan me
I just visiting 3 web today.
1. DDBoard, this my favourite
2. my web, under construction
3. liewcf.com, wordpress idea

so this scanner from who???

calum · **Re: Whats This? -** 02-08-2007, 03:28 AM

I doesn't really matter about being scanned. I get scanned all the time. It doesn't mean that your in danger, it happens to everyone. People just set up port scans to scan for vunerable computers. If you have a good firewall like Zone Alarm you should be fine. Don't worry about it

nioton · **Re: Whats This? -** 02-08-2007, 05:49 AM

yes as others said you do not need to concern about the scanning attempts on your PC.

just try to keep your firewall up to date

**Re: Whats This? -** 02-08-2007, 06:06 AM

BUt ip scans are quite normal...i do them quite often to find out if certain persons are online or offline