close

Privacy guaranteed - Your email is not shared with anyone.

Firewall port question

Discussion in 'Tech Talk' started by aspartz, Feb 7, 2006.

  1. aspartz

    aspartz

    Joined:
    Oct 19, 2000
    Messages:
    3,281
    Likes Received:
    133
    Location:
    Sandstone, MN 55072
    MY firewall seems to be getting hit with a number of packets going to port 23157 (TCP and UDP). These are coming from a large number (>100) of IPs and only about 2 or three from any one given isp. I've googled a little but cannot find a defined use for this port. Any clues?

    ARS
     
  2. ForsakenOne

    ForsakenOne Supreme Member

    Joined:
    Oct 6, 2004
    Messages:
    81
    Likes Received:
    0
    Location:
    Ohio
    Best guess is a ddos attack.
     

  3. USMC_G19

    USMC_G19 Ham Salad

    Joined:
    Dec 13, 2005
    Messages:
    124
    Likes Received:
    3
    Location:
    Northern VA
    probably just a port scan. "hacker" types set up scripts to run againt a block of IP's to look for vulnerabilities or backdoors. As long as you are running a firewall/AV protection you should be fine.
     
  4. berniew

    berniew Liberty

    Joined:
    Nov 3, 2002
    Messages:
    1,362
    Likes Received:
    0
    Location:
    MN
    Are you running any 'wierd' software on your computer?

    If you aren't sure, or you want to know...

    Download this from the person who discovered the Sony 'rootkit'...


    http://www.sysinternals.com/Utilities/ProcessExplorer.html
     
  5. DesertEagle

    DesertEagle OH HELL MY HEAD CLM

    Joined:
    May 31, 2001
    Messages:
    445
    Likes Received:
    3
    Location:
    Rome Ga
    Interesting. Over the last 2-3 days I've been being hit with a number of portscans myself. It's my udp ports over and over, same ones;

    Somebody is scanning your computer.
    Your computer's UDP ports:
    1030, 1031, 4297, and 1033 have been scanned from 60.11.125.36..

    Whois on the IP comes back as the IANA.

    Bout every 4-5 hours they hit me with a scan.

    D.E.
     
  6. DragonRider

    DragonRider

    Joined:
    Jun 6, 2002
    Messages:
    198
    Likes Received:
    0
    Location:
    NoVA
    same thing for me. I think the same ip too. I would have to check my captures.

    John