Portscanned ?!?, Am i being

[Buccaneer]

Hi,

I am wondering if i am being portscanned, what it means and what could happen.

My knowledge of networkhacking is very low.

This IP: 200.175.56.xx:(insert any port here) has tried to connect to my IP, on port 5xxxx, for day's now.

All attemps has been blocked via PeerGuardian2, but this port is open in my router for P2P reasons.

PG says: ICMP Traffic, 200.175.56.xx:xxxx --> 10.0.0.2:5xxxx, TCP, Blocked.

Please tell me exactly what this guy in Brazil wants from me.

What is he doing ? Why would he connect from several diffrent ports to my only open port ?

What could i do or, most importent what should i do?

I run WinXP SP, all updates, no spyware, no virus and no unneeded sevices.

thx...

ps. I even phoned to Brazil to get some info, but we don't speak the same languages, LOL.

[clavicle]

Port scanning may initially be associated with trojans try to gain entry into your computer. Many worms are associated with this activity too. But the best way to check all these is using a firewall.

You haven't mentioned any ill effects. You can also use the inbuilt XP firewall (sp2), or zone alarm or Sygate.

I personally use Sygate and it is free and everyday I am checked from these similar port scans on my network.

Edited July 14, 2005 by clavicle

[chilifrei64]

Port Scanning is exactally what it says it is. If you are fully up to date and running firewall software with no spyware or viruses then I wouldnt pay too much attention to it. People scan entire IP ranges for open ports that they can exploit..

Run a scan on yourself to see what ports are open and research them to see if you are vulnerable.. you can either use a program called SuperScann from a remote location or use http://scan.sygatetech.com/prequickscan.html

As the above person.. I too like to use sygate.. Simple, always works, never breaks down.. great product.

[Buccaneer]

The problem seems to be solved now, the guy has gone. After i stopped my p2p-client, he disapered next day. But i stll wonder wich p2p-client he used.

I tried different online portscanners like Shields UP! .They all said that my ports are blocked but not stealth.

I dont't use a firewall cos i have a firewalled router and cos some people claim, that a software-firewall can be a handle for a blackhat to get acces to your system.

Instead i try to keep my system clean, use non-MS software, stop not needed services in XP and connect through my ISP's proxy server.

I really recommend Peerguardian2, it seems there is meny nasty private/company in cyberspace.

thx for your responds...