Jump to content

Recommended Posts

Ok, so as of about a month ago I have been getting a lot of UDP Port scan attacks,
about one every three or so days, at random times.
Eset has block them all so, thank you for that.

Both Eset, and Malwarebytes say I am clean. So there is that.

So my question is, what do I do to make this stop.
Any info you need I will be happy to provide, just let me know what you need. :)

Thanks in advance for your help.

Link to comment
Share on other sites

  • Administrators

You can't stop that if you are not behind a router with NAT or firewall. Also port scan attacks may come from legitimate devices; in such case it's possible to unblock particular local IP address.

Link to comment
Share on other sites

8 hours ago, pestoposta said:

Any info you need I will be happy to provide, just let me know what you need.

Post a screen shot of the Eset firewall log showing the UDP ports being blocked.

Link to comment
Share on other sites

First thank you both for you quick response :)

@Marcos I am plugged directly into a modem. And Esets firewall has been blocking them.
I guess my next question is, is this something I need to worry about,
how do I find out more, where is it coming from, and so on.
Also what kind of devices are we talking about?

@itman I assume that is just the standard log file yes?
Otherwise where do I find it.

Thanks again for the quick response.

Link to comment
Share on other sites

21 minutes ago, pestoposta said:

@itman I assume that is just the standard log file yes?

Yes. Open Eset log files and select the firewall log. Expand the window so that the columns are shown before taking the screen shot.

Link to comment
Share on other sites

As Marcos previously posted, it appears you are just using a cable modem without a router and corresponding firewall contained within. A router with NAT and stateful packet inspection(SPI) would block these scans at the router. You might consider purchasing a router with NAT and SPI capability and connecting it between the cable modem and your PC.

Edited by itman
Link to comment
Share on other sites

31 minutes ago, pestoposta said:

Thanks.

Modem reset, will keep you posted. :)
 

Oops. I updated that reply as you will see above. Resetting the modem probably won't help the scanning issue but worth a shot.

Link to comment
Share on other sites

No worries, resetting the modem aint gunna hurt anything,
and a small shot at stopping it is worth an unplug and replug. XD

Will keep a new router in mind,
I am in need of one, which is why
I am just plugged into the modem.

If you have a recommended router that would be appreciated :)

Thank you yet again :)

Link to comment
Share on other sites

1 hour ago, pestoposta said:

If you have a recommended router that would be appreciated

Can't help you there since I have always used DSL. Just recently upgraded to 1000 mbps fiber from AT&T.

Link to comment
Share on other sites

For what is worth, your firewall log doesn't look that bad. Last time I checked my router's firewall log, I was getting constantly scanned on the Telnet ports. So much so, I created Eset firewall rules to block anything in/out from those ports in case something slipped through the router firewall. 

Link to comment
Share on other sites

Well this is new to me, and I am fairly paranoid, so here I am. XD
... on a related note I probably should make it a point to learn more about this kinda thing, anywhere I should start looking?

Link to comment
Share on other sites

Well it has been around a week now.
And connecting via the old router seems to have brought a halt to the issue.

So thanks again for the help. :)

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...