Port Scans

[automatic]

i have sygate firewall and i have been checking my logs to see what has been going on as to why i have been lag spiking out of day of defeat/counter-strike servers every 10 minutes. turns out i've been getting port scans from multiple IP's. i've whois'd the IP's with sygate and they usually end up as a company that has some affiliation with gaming servers or communication servers. i've run virus scans etc nothing came up. i've even gone so far as to reformat my computer but still the same problem. right now i pretty much don't have anything on my computer except mozilla, aim, and steam. i ONLY lagout when i try to play a half-life mod. about 30 minutes ago i tried to play day of defeat in a server by myself to see what would happen i didn't get a port scan but i instantly lagged out. if it helps, i've blocked the Steam Overlay UI because i thought it was the cause of the port scans for unknown reasons.

help!

[sswilson]

Don't you have a router? Port scans are a fairly normal occurance, but a router pretty well stops them dead in their tracks.

[automatic]

yes i do, i have an Xtreme N Gigabit Router (D-Link), i've never had port scans show up on my firewall before for the past 6 years so it's not a normal occurance for me :x.

[BrainEater]

Ok...

What kind of info is your firewall giving you ?

If you are behind a router , but still recieveing scans behind that , there's an issue.

What ports ? Do have have open ports set on your router ?

[automatic]

I get this msg from my firewall: "Somebody is scanning your computer.
Your computer's UDP ports: 2140, 2143, 2144, and 2152 have been scanned from 72.5.102.201.."

and here is the whois on the IP
"Internap Network Services Corporation PNAP-09-2004 (NET-72-5-0-0-1) 72.5.0.0 - 72.5.255.255
Nuclear Fallout Enterprises INAP-DEN-NUCLEARFALLOUT-3017 (NET-72-5-102-0-1) 72.5.102.0 - 72.5.102.255

# ARIN WHOIS database, last updated 2009-03-24 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database."

I don't have any ports open on my router, again i've been port scanned from multiple IP's but i have reformatted recently and haven't really touched steam because i'm afraid of more port scans, that is the last and only port scan i've received since i tried to play day of defeat again after my reformat.

[enaberif]

A router will not display a message like as far as I know unless you got some really gifted router.

[encorp]

I've never seen a router display messages like that in my life.

[sswilson]

That's the message he's getting from his software firewall behind the router.

[automatic]

glad somebody picked up on that! ;)

still need help :[

[enaberif]

Originally Posted by automatic

glad somebody picked up on that! ;)

still need help :[

Probably only happens when your running these servers right?

Perhaps its a way of them checking for game exploits.

Or does it happen all the time.