Re: wireless port scan attacked ??? in Wireless Security http://www.dslreports.com/forum/r22452747 en Wed, 10 Feb 2010 07:35:34 EDT Wed, 10 Feb 2010 07:35:34 EDT Re: wireless port scan attacked ??? http://www.dslreports.com/forum/remark,22452747 SYNACK : First of all the Xmas port scan apparently came from the WAN, not via wireless. What arrives there is out of your control, so there is nothing you can do except ignore it. There is no danger. Do you forward any ports?

What is the make and model of your router. Most cheap routers have relatively primitive detection algorithms, so it might even well be a false positive. Can you give the full log entry (source IP, destination port, etc.)]]> http://www.dslreports.com/forum/remark,22452747 Wed, 27 May 2009 15:25:21 EDT Re: wireless port scan attacked ??? http://www.dslreports.com/forum/remark,22437200 docrice : Xmas port scan involves an "odd" packet that is intentionally sent to an address where the packet's IP header has certain "unusual" flags set on it. Depending on the IP stack on the receiving host, it responds (or not) in a certain way which allows the originator to determine host characteristics.

This is very common on interfaces facing the Internet directly and it's not something you can stop. Port scans are a fact of life like pollution outside your home's front door.

A "PSK port scan" presumably is just detected attempts of someone trying to associate using an encryption key based on an incorrectly computed pairwise master key. Someone within radio range is probably trying different pre-shared key values to see if they can tap into your wireless connection.]]> http://www.dslreports.com/forum/remark,22437200 Sun, 24 May 2009 16:02:52 EDT wireless port scan attacked ??? http://www.dslreports.com/forum/remark,22437184 anon :
when i saw my router log file i saw following four to five entries like this and also some PSK port scan attcked.
i don't know actually what is this? so if anybody knows than please guide me.. i know that this is not good for any wireless network or internet users only so please guide me to stop this..

Xmas port scan attack from WAN (ip:) detected.]]> http://www.dslreports.com/forum/remark,22437184 Sun, 24 May 2009 15:55:47 EDT