Quote:
|
Originally Posted by iadom
After a couple of weeks without any of the several hundred port 135 scans per day, I have just had 9 in the past few minutes, 50% from Ntl customers. Has port 135 blocking been switched off?
EDIT....OMG. it is as bad as ever, dozens of scans racked up now. at least ten from different customers of the same French ISP.  |
Just to update anyone who is interested,
Since this started last Monday the 15th, my firewall has now logged over 8,000 hits, mainly port 135/445, almost 75% from ntl users, and my PC is not switched on all day.
I have been in contact with John in Swansea ( a very pleasant man ) and it would appear that I have bowled them a googly. Over the weekend, at their request, I added 3 IP addresses they supplied to my firewall trusted zone, to allow them to carry out some tests on the system. To date they are saying that the ports on this part of the network are definately blocked, it does seem that I am quite unique at the moment. They are now in possession of my firewall logs for Sat/Sun so watch this space.
I am not in the least worried about this, but I am intrigued as to why I suddenly started to get these hits when I have had none of this type since the port blocking was enabled.