Firewall and port scanning

[mckrooz]

Hi, I'm using Sygate firewall on my pc using Comcast cable network. When the log says I'm being scanned by an IP address on several different ports, how do I know if I'm actually being hacked? Is there a certain port that they scan to enter my computer? The scans are reported as minor. Here's an example log.

Somebody is scanning your computer.
Your computer's TCP ports:
6129, 80, 3127, 1025 and 2745 have been scanned from 24.126.44.216.

 

[vinnie]

If ports 137,138 and 139 are open without good reason, that's probably a bad thing. Otherwise, as long as you're properly patched and updated and your firewall is setup correctly, then a little port scanning isn't going to be an issue.

All port scanning is is seeing if there's a computer which responds on those ports, any actually entry or exploit attempts are then directed at open ports if the person wants. Usually scanning is just kiddies looking for open file or printer shares, or possible DDoS zombies, not hardcore hackers preparing the destroy your computer like the media and movies would have you believe.

 

[mckrooz]

Thanks for the info.

 

[shade91]

How do you know if you're being hacked? That is what IDS is for.