10-04-2007, 18:51
|
#1
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Odd Port scan results
Port Source IP Source port Destination IP Dest port
udp Incoming 169.254.154.140 2187 239.255.255.250 1900
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 2187 239.255.255.250 1900
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 2187 239.255.255.250 1900
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
udp Incoming 169.254.154.140 137 169.254.255.255 137
Note: none of the results are my ip thats the odd thing. I did a ip lookup and it said something like "internet asignment numbers" Why would my firewall pick these up if it isnt directed at my ip?
|
|
|
|
10-04-2007, 18:54
|
#2
|
|
Inactive
Join Date: Jun 2003
Location: Essex innit
Age: 50
Services: Sky HD + 16Mb ADSL
BT Telephone
Posts: 15,735
|
Re: Odd Port scan results
Have you run a full virus/ spyware/malware/ adware scan recently? Those look like internal IP addresses and not external.
|
|
|
|
|
10-04-2007, 19:01
|
#3
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Yeah and ive found nothing, but just before my brothers internet wasnt working for some reason, so hes messed about with the router and modem, changed a few wires around and now its working again. My PC's internet was working fine.
|
|
|
|
|
10-04-2007, 19:06
|
#4
|
|
Inactive
Join Date: Jun 2003
Location: Essex innit
Age: 50
Services: Sky HD + 16Mb ADSL
BT Telephone
Posts: 15,735
|
Re: Odd Port scan results
Are these results from your PC firewall? If so what is your IP address (internal 169.xxx.xxx) the IP of the router and your brothers IP address. Also are either of you running any "strange" software? Might be best to reboot the PC and the router.
|
|
|
|
|
10-04-2007, 19:10
|
#5
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Yeah from my pcs firewall. My internal ip is 192.168.0.2 brothers is 192.168.0.4 and the routers is 192.168.0.1 (i think) i know for a fact that by brother was using torrents yesterday, i dont use them though. But this scan only happened when my brother came in from work before and switched his pc on, may be coincidence maybe not, but ive had my pc on all day and havent had anything similer during the day.
|
|
|
|
|
10-04-2007, 20:12
|
#6
|
|
cf.addict
Join Date: Feb 2005
Location: Clydebank (G81, Langley, ex-ntl)
Services: VIP120 with TiVo
Posts: 346
|
Re: Odd Port scan results
Are you using a wireless connection? Just wondering if you also have an unused ethernet port on your PC that is being allocated a 169 address (Windows would give it a 169 address if it couldn't get one anywhere else). UDP port 137 is NetBios and it looks like it's broadcast traffic (255.255), like the card saying 'I'm here, who wants to talk?'.
Basically check that there is not an ethernet port somewhere that is enabled but not in use. Worth a shot.....
|
|
|
|
|
11-04-2007, 10:52
|
#7
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Nope not running wireless, however i do have a switch connected to my router, could windows be asigning that the 169 addresses? it seems odd though that my firewall would be picking up those scans because none of the ip's listed are related to my pc.
|
|
|
|
|
11-04-2007, 13:37
|
#8
|
|
cf.addict
Join Date: Feb 2005
Location: Clydebank (G81, Langley, ex-ntl)
Services: VIP120 with TiVo
Posts: 346
|
Re: Odd Port scan results
What is connected to the switch?
Also, have you tried doing 'ipconfig /all' from a command prompt on each PC or laptop to check that a 169 address is not in use somewhere?
|
|
|
|
|
11-04-2007, 14:00
|
#9
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Got two pcs coneccted to the switch as there wasnt enough ports on the router. Just did that ipconfig thing for my computer and no mention of the i.ps noted in the log. However just looking at my firewall log, ive had two port scans blocked, but this time the destination i.p is correct, it shows my computer's i.p. Seems to be back to normal for now, i will have a look again later to see what happens when my brother comes home and switches his pc on, see if the anything similer happens.
|
|
|
|
|
11-04-2007, 15:02
|
#10
|
|
Inactive
Join Date: Mar 2005
Location: Huddersfield
Age: 50
Services: Virgin TV(M), Phone, Broadband(2MB)
2MB broadband
Posts: 250
|
Re: Odd Port scan results
the 169.x.x.x is an APIPA address...your computer will self assign one of these if it cannot get an address from a DHCP server...more about that here:
http://www.petri.co.il/what's_apipa.htm
as to where the addresses are coming from...dunno! I suspect that it will be from somewhere internal though so your plan to check your brothers PC will be the next logical step.
|
|
|
|
|
11-04-2007, 16:29
|
#11
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Thanks for the help. It could be that because my brother was messing about with the router and stuff that is happened. His internet wasnt working so he started moving cables about and stuff.
|
|
|
|
|
12-04-2007, 12:06
|
#12
|
|
Inactive
Join Date: Mar 2005
Location: Huddersfield
Age: 50
Services: Virgin TV(M), Phone, Broadband(2MB)
2MB broadband
Posts: 250
|
Re: Odd Port scan results
:o)
probably the best thing to do then if your not sure what he has done is to unplug everything and start again...that way you know that it is right and you are not wasting time trying to find out what has changed!
|
|
|
|
|
12-04-2007, 16:34
|
#13
|
|
Inactive
Join Date: Mar 2007
Services: Virgin media 10 MB
Virgin Media Full TV package
Posts: 78
|
Re: Odd Port scan results
Everything seems normal now, guess i'll never know what happened!! Thanks for the help though 
|
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +1. The time now is 18:19.
|
Join CF
You are here: 
