draknetcenter: warning .. there was a port scan in .......

[almusalimalmusalimah]

hello everyone

this afternoon draknetcenter gave a scary message

warrning there was a port scan on the ports 39236 and 59540

immediatly i opened that message and put those suspicious things in the black list

so .... can anyone tell me whats just happend

[wintpe]

Hi there

Ive seen this in the past also, and im behind a comercial firewall.

What i suspect it is, is you are browsing some site that has some hidden javacript thats abusing your machine, as i know from previous conversations your behind a nat'ed firewall router youself which prevents any inbound direct access to you network.

Therefore it had to come from one of your machines, being, and since you did not start a nmap scan, then one of you apps had to start it.

Web browser is the most likly as it can be programed by the site you are visiting.

And it can be told to try to access any network, if an http page had loads of hrefs to localhost port and they were sequential the anti attach software in magiea may interpret that as a port sca.

Its one theory, cant be sure, but thats what i suspect was causing mine.

Regards peter