Security Issue: Port Scanning

Discussion in 'Hosting Services / Control Panel' started by maiaawa, May 25, 2008.

Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.
  1. I found this rather unusual that the discountasp server hosting my site has been port scanning the users browsing the site.

    My website only host basic webpages and there is nothing on the pages which seems to be doing it...

    Here's my firewall log:

    11:38:15 AM Intruder address: 64.22.138.9,
    11:38:15 AM Detected 1287, 2567, 1799, 3335, 3079, 3847, 4871 port(s) scanning from 64.22.138.9
    22/05/2008 5:06:46 PM Detected 55819, 54795, 60939, 62475, 53515, 1292, 1804 port(s) scanning from 64.22.138.9
    22/05/2008 3:44:30 PM Detected 57352, 57608, 57864, 58120, 58376, 58888, 59144 port(s) scanning from 64.22.138.9

    So most of the firewalls are blocking my site...

    Do anyone know what seems to be the reason.

    Thanks.

    Post Edited (bernard) : 5/25/2008 10:57:22 AM GMT
     
  2. It's Outpost Firewall.. and the firewall is not blocking any other website...

    The funny thing is the server is scanning the users when the user/browser is idle
     
  3. What kind of Firewall are you running? The ports listed were all high number port, most probably those were justports that the client browser were using to talk to the web server.
     
Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.

Share This Page