Jump to content

Recommended Posts

Posted

Ok, so as of about a month ago I have been getting a lot of UDP Port scan attacks,
about one every three or so days, at random times.
Eset has block them all so, thank you for that.

Both Eset, and Malwarebytes say I am clean. So there is that.

So my question is, what do I do to make this stop.
Any info you need I will be happy to provide, just let me know what you need. :)

Thanks in advance for your help.

  • Administrators
Posted

You can't stop that if you are not behind a router with NAT or firewall. Also port scan attacks may come from legitimate devices; in such case it's possible to unblock particular local IP address.

Posted
8 hours ago, pestoposta said:

Any info you need I will be happy to provide, just let me know what you need.

Post a screen shot of the Eset firewall log showing the UDP ports being blocked.

Posted

First thank you both for you quick response :)

@Marcos I am plugged directly into a modem. And Esets firewall has been blocking them.
I guess my next question is, is this something I need to worry about,
how do I find out more, where is it coming from, and so on.
Also what kind of devices are we talking about?

@itman I assume that is just the standard log file yes?
Otherwise where do I find it.

Thanks again for the quick response.

Posted
21 minutes ago, pestoposta said:

@itman I assume that is just the standard log file yes?

Yes. Open Eset log files and select the firewall log. Expand the window so that the columns are shown before taking the screen shot.

Posted (edited)

As Marcos previously posted, it appears you are just using a cable modem without a router and corresponding firewall contained within. A router with NAT and stateful packet inspection(SPI) would block these scans at the router. You might consider purchasing a router with NAT and SPI capability and connecting it between the cable modem and your PC.

Edited by itman
Posted
31 minutes ago, pestoposta said:

Thanks.

Modem reset, will keep you posted. :)
 

Oops. I updated that reply as you will see above. Resetting the modem probably won't help the scanning issue but worth a shot.

Posted

No worries, resetting the modem aint gunna hurt anything,
and a small shot at stopping it is worth an unplug and replug. XD

Will keep a new router in mind,
I am in need of one, which is why
I am just plugged into the modem.

If you have a recommended router that would be appreciated :)

Thank you yet again :)

Posted
1 hour ago, pestoposta said:

If you have a recommended router that would be appreciated

Can't help you there since I have always used DSL. Just recently upgraded to 1000 mbps fiber from AT&T.

Posted

Oh how I wish I had fiber here.

Ah well thank you once again. :)

Posted

Yeah, no dice on the reset, ah well. :/
Going back to the old router, see if that fixes thing.

Thanks again for your time.

Posted

For what is worth, your firewall log doesn't look that bad. Last time I checked my router's firewall log, I was getting constantly scanned on the Telnet ports. So much so, I created Eset firewall rules to block anything in/out from those ports in case something slipped through the router firewall. 

Posted

Well this is new to me, and I am fairly paranoid, so here I am. XD
... on a related note I probably should make it a point to learn more about this kinda thing, anywhere I should start looking?

Posted

Well it has been around a week now.
And connecting via the old router seems to have brought a halt to the issue.

So thanks again for the help. :)

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...