Recent Numrous Firewall Attacks

[pestoposta 0]

Ok, so as of about a month ago I have been getting a lot of UDP Port scan attacks,
about one every three or so days, at random times.
Eset has block them all so, thank you for that.

Both Eset, and Malwarebytes say I am clean. So there is that.

So my question is, what do I do to make this stop.
Any info you need I will be happy to provide, just let me know what you need.

Thanks in advance for your help.

[Marcos 5,733]

You can't stop that if you are not behind a router with NAT or firewall. Also port scan attacks may come from legitimate devices; in such case it's possible to unblock particular local IP address.

[itman 1,921]

8 hours ago, pestoposta said:

Any info you need I will be happy to provide, just let me know what you need.

Post a screen shot of the Eset firewall log showing the UDP ports being blocked.

[pestoposta 0]

First thank you both for you quick response

@Marcos I am plugged directly into a modem. And Esets firewall has been blocking them.
I guess my next question is, is this something I need to worry about,
how do I find out more, where is it coming from, and so on.
Also what kind of devices are we talking about?

@itman I assume that is just the standard log file yes?
Otherwise where do I find it.

Thanks again for the quick response.

[itman 1,921]

21 minutes ago, pestoposta said:

@itman I assume that is just the standard log file yes?

Yes. Open Eset log files and select the firewall log. Expand the window so that the columns are shown before taking the screen shot.

[pestoposta 0]

Thank you again o.o

I think that should do you.

[itman 1,921]

As Marcos previously posted, it appears you are just using a cable modem without a router and corresponding firewall contained within. A router with NAT and stateful packet inspection(SPI) would block these scans at the router. You might consider purchasing a router with NAT and SPI capability and connecting it between the cable modem and your PC.

Edited May 7, 2017 by itman

[pestoposta 0]

Thanks.

Modem reset, will keep you posted.
 

[itman 1,921]

31 minutes ago, pestoposta said:

Thanks.

Modem reset, will keep you posted.
 

Oops. I updated that reply as you will see above. Resetting the modem probably won't help the scanning issue but worth a shot.

[pestoposta 0]

No worries, resetting the modem aint gunna hurt anything,
and a small shot at stopping it is worth an unplug and replug. XD

Will keep a new router in mind,
I am in need of one, which is why
I am just plugged into the modem.

If you have a recommended router that would be appreciated

Thank you yet again

[itman 1,921]

1 hour ago, pestoposta said:

If you have a recommended router that would be appreciated

Can't help you there since I have always used DSL. Just recently upgraded to 1000 mbps fiber from AT&T.

[pestoposta 0]

Oh how I wish I had fiber here.

Ah well thank you once again.

[pestoposta 0]

Yeah, no dice on the reset, ah well. :/
Going back to the old router, see if that fixes thing.

Thanks again for your time.

[itman 1,921]

For what is worth, your firewall log doesn't look that bad. Last time I checked my router's firewall log, I was getting constantly scanned on the Telnet ports. So much so, I created Eset firewall rules to block anything in/out from those ports in case something slipped through the router firewall. 

[pestoposta 0]

Well this is new to me, and I am fairly paranoid, so here I am. XD
... on a related note I probably should make it a point to learn more about this kinda thing, anywhere I should start looking?

[pestoposta 0]

Well it has been around a week now.
And connecting via the old router seems to have brought a halt to the issue.

So thanks again for the help.