Thread: Lots of port scans. What to do?
View Single Post
Old 27-11-2003, 11:31   #4
zovat
Inactive
 
zovat's Avatar
 
Join Date: Oct 2003
Location: Bracknell
Age: 56
Services: NTL Telephone 3M Broadband - CM Sky TV
Posts: 1,246
zovat has reached the bronze age
zovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze agezovat has reached the bronze age
Send a message via MSN to zovat
Re: Lots of port scans. What to do?
Quote:
Originally Posted by WSHBB
I keep getting different people trying to gain access to the pc. I get this message:
ZoneAlarm Pro prevented access to port 23 on your computer.
ZoneAlarm Pro has blocked access to port 1026 on your computer.
ZoneAlarm Pro has blocked access to port 4000 on your computer
along with their IP address.

What can I do to stop this? It happens maybe 5 times a day. It never used to happen.
Unfortunately there is no way to stop your ports from being scanned - most hacker run a scanning program that scans an IP range looking for certain port numbers...

Port 23 - telnet protocol - often used to hack servers without up to date security patches.
port 1026 - this is the windows messanger listening port - if open - spammers can cause popup spam in messenger - nasty
port 4000 - this is an ICQ port, it would appear this may be spammers rather than hackers. although back orifice can (and in the past has) be configured use this port


it just seems strange that they are using these specific ports as they are not generally used by trojans or viruses - however a spammer could really annoy you using these particular ports.

HTH
zovat is offline   Reply With Quote