PDA

View Full Version : What is this mess - moved by Tom


zip316
August 24th, 2007, 06:30 PM
I get this message on my firewall and I am wondering what it is.

Somebody is scanning your computer.
Your computer's TCP ports:
1025, 2745, 5000, and 3140 have been scanned from 74.196.111.240..

Tom
August 26th, 2007, 03:41 AM
Likely means other internet servers are trying to identify your available ports. Why might be unknown, but since the firewall is blocking activity looks like it is doing it's job. But instead of my guessing at this let's move this request to the CTH Networking forum for some input.

MaDef
August 26th, 2007, 11:18 PM
I get this message on my firewall and I am wondering what it is. someone on the suddenlink network (they are a cable provider) is looking for an exploit on your system.

Archangel122184
August 27th, 2007, 02:15 PM
Actually, your problem isn't as nefarious as MadDef states, but it is not good. Every port listed is a common port for separate trojans that allow for remote access and remote control (if you have ever heard of a bot net these are the client programs for them). A computer on your network or a computer on a network the previously used your IP address was either part of a bot net or a controller for a bot net.