I read somewhere - Port scan detected and blocked, what does it mean?
I have Bitdefender Total Security 2014.
Recently I have been getting the message/alert "Port scan detected and blocked". I did not care about it much until I got more, especially at a specific time. I was shocked when I saw the External IP of the attacker is from the same country where I am; so it's not a robot or virus, it's a hacker and I am his target. Can the hacker break my security and access my computer if he found an opened port?
How to block port scanning by hackers? I have heard of NMap but I am not a network specialist.
If my anti-virus and firewall are not the best, what do you recommend for me? All the internet is saying Bitdefender is one of the best (if not the best!). But I have asked a specialist and he said "COMODO".
What configurations should I set on my router to help regarding this problem? Should I allow the following settings or not?
IGMP Snooping
IGMP Snooping
QoS
- I have disabled UPnP
- Wifi password encrypted "WPA2-PSK"
- I have enabled: ICMP Flooding, SYN Flooding and ARP Attack but I think my internet connection is getting slower!
- http://prntscr.com/5fabgc
I was wondering whether Windows Updates could be the reason for you receiving the message - port scan detected. We have people working in shared locations and I see these:
Firewall Blocked Scan Port Source IP: FE80:0000:0000:0000:F812:4A2D:648A:0E45
Firewall Blocked Scan Port Source IP: 172.16.101.168
Firewall Blocked Scan Port Source IP: 172.16.100.173
Firewall Blocked Scan Port Source IP: 172.16.100.190Looking at the WUDO post, it could be that the Win10 update is configured to try to reduce the bandwidth on a few machines. There is sadly enough not enough information in the BITDEFENDER report to easily flag the alert as a false positive.