Welcome to WebmasterWorld Guest from 54.226.133.245

Forum Moderators: bakedjake

Message Too Old, No Replies

I'm being port scanned

     
1:31 am on Nov 18, 2011 (gmt 0)

Senior Member

WebmasterWorld Senior Member wheel is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Feb 11, 2003
posts:5063
votes: 11


My linux desktops keep complaining that they're being port scanned amongst other things. Turns out it's coming from a windows PC on my network. I'm pretty sure the windows PC is clean, but hey, not 110%.

IS there any reason for this activity from a windows PC, other than it's got a virus?
7:20 am on Nov 18, 2011 (gmt 0)

Senior Member from KZ 

WebmasterWorld Senior Member lammert is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Jan 10, 2005
posts: 2886
votes: 1


Does your linux system tell you which ports are scanned? Windows is quite active in finding other Windows computers on the net and your linux box might just be triggered by one of those requests. A list of all ports which Windows systems use in their communication can be found here [support.microsoft.com]. If linux reports other ports, you have a hidden port scanner on your Windows computer.

Another thing you can do is to open a DOS prompt on your windows box (In Administrative mode if it is a new windows version) and type the command netstat -anb. This will give you the names of all processes which are currently involved in network activity, including the IP addresses and ports they are using.