why is my portal scanning me. ports 139 & 445 [Archive] - SpeedGuide.net Broadband Community

View Full Version : why is my portal scanning me. ports 139 & 445


alexf
09-23-03, 02:13 AM
My 2wire homeportal is persistently scanning my computer, ports 139 & 445 using ports in 60k range a source.
I am very suspicious about this.
Any suggestions are appreciated.
THX

Shinobi
09-23-03, 04:35 AM
TCP Port 139 and 445 should be blocked inbound by your router.
I don't know what you mean as in:
"My 2wire homeportal is persistently scanning my computer"

Is someone from the "outside" of your network scaning your computers?
Here is a "small" part of my router's "logs"
UDP: 137
UDP: 137
UDP: 137
UDP: 137
UDP: 137
TCP: 445
TCP: 139
UDP: 137
UDP: 137
TCP: 445
TCP: 139
UDP: 137
UDP: 137
UDP: 135
Only listing the ports that are blocked, all of this are ussually either viruses that are on people computers, scanning netblock's trying to find more open computers to infect
OR hackers using a scanning type program to find open computers to hack into, or use to bounce attacks from, or maybe to setup some small temporary FTP file Server..
in any case, your Router should be blocking TCP and UDP inbound on 139 and 445.

alexf
09-23-03, 11:20 PM
Thank you the happy one.
It is my 2wire gateway router that is scaning me & my zone alarm blocking the scans.
It all started after I updated my 2wire software.
Any ideas?