TCP- or UDP-based Port Scan Count: 8252

[s1nk0]

Hello. I recently visited a malicious spoof site and checked my Firewall event logs. This is what I found:

TCP- or UDP-based Port Scan 8252 Tue Jun 16 22:00:25 2015
TCP- or UDP-based Port Scan 1665 Tue Jun 16 22:07:08 2015

This is from my router's firewall. The most counts I've seen are 107. Should I worry about this? What can I do now? Thank you.

 

[bill001g]

Generally if the router is detecting it it will block it. The ones you would worry about are the ones you get no log entries for but they were causing issues.

Since these are 7 minutes apart it likely will cause you no issues. Hard to say port 53 is used for DNS. The key protection is the NAT. Any traffic the router does not have a nat session for is discarded so that alone will protect your machine from most attacks.

 

[s1nk0]

Generally if the router is detecting it it will block it. The ones you would worry about are the ones you get no log entries for but they were causing issues.

Since these are 7 minutes apart it likely will cause you no issues. Hard to say port 53 is used for DNS. The key protection is the NAT. Any traffic the router does not have a nat session for is discarded so that alone will protect your machine from most attacks.

Thank you for replying. Well since posting this thread, I noticed the 1665 entry number went up to 1666 long after exiting the page. But now it seems to have stopped. I also checked if my ports are open with http://www.yougetsignal.com/tools/open-ports/ and www.canyouseeme.org and they seem to be closed/unreachable. I also checked my internet speed with testmy.net and there wasn't any drop in speed.

So you think there's nothing to worry about anymore?

 

[bill001g]

You see constant trash all the time. Many times it is virus looking for something to infect. Since it does not get past your router it is of little risk to you. Only if you start seeing many 1000s of these per second is there a problem. You would have to call your ISP and see if there is anything they are willing to do.

 

[s1nk0]

You see constant trash all the time. Many times it is virus looking for something to infect. Since it does not get past your router it is of little risk to you. Only if you start seeing many 1000s of these per second is there a problem. You would have to call your ISP and see if there is anything they are willing to do.

Okay, thank you very much.