Computer hardware and software
i hav been recieving constant port scan attack?
Question : i hav been recieving constant port scan attack?
hey peeps………am usin sygate personal firewall……from past 2 days it has been notifying me about a constant port scan attack(3 to 5 in a day) from a ip 204.16.208.135…..i did a trace back n found the org as FAST COLOCATION SERVICES …….and server name server being SANDY.THEHIDEOUT.NET……..wats this all about…….am i at risk….kindly advice…..thanks
server colocation
Best answer:
Answer by Netasia Solutions
The best thing to do now is make sure your firewall is updated as well as your windows are patched with the latest security patches.
Disconnect your affected PC from the network to prevent it from spreading the attack elesewhere.
Run your antivirus, antispyware to make sure no trojan is been installed that might act as a backdoor to network attack.
-
-
#2 written by π² 1 year ago
Just change your firewall policy to reject all requests from that IP, or through your router if possible.
If this is the same IP over and over again then I think that’s the best action to take. If it’s different IPs, I wouldn’t worry too much about it. People scan ranges all the time to find vulnerable machines.
- Comment Feed for this Post
Your firewall is holding out fine and your system has not been compromised so there is no cause for panic right now. You are not at very high level of risk as long as your firewall can block these requests.
Scan your PC for any trojans or adware/spyware programs that my be trying to establish connections with this or any other server. Get rid off all such suspicious software. This could also be an automated scan which is conducted by a program to identify possible targets.
I googled for it… could not find anything useful apart from the fact that this URL has been reported by some users in other forums and support sitesfor similar activities.