Asus WL500gP v2 router scanning ports

Hi there.

I have several laptops connected via WiFi to my Asus WL500gP V2, which is then usually connected to my bridged modem (which is connected to the internet then).

Currently, the modem is disconnected from the router and I already restored default factory settings for the router and even updated its firmware to a newer official one (3.0.4.4). I also did the router settings manually (no load of previously saved configuration file).

After that, just by connecting a laptop via Wifi to the router (totally disconnected from the internet), I get the message 'Somebody is scanning your computer. Your computer's UDP ports: 5353, 1036, 1041, 1900 and 137 have been scanned from 192.168.1.1' (being that the port numbers could change - and this IP address is the internal IP address for my router).
If I connected the same laptop to the same router, but through LAN cable, it didn't happen.

Any ideas are welcome.

 

check to see if there are any connections on those ports. to do this, open command prompt and type netstat -a
press enter and your computer will "listen" for any activities on its ports. you can also type netstat -o and this will give you a PID for each connection. just make a note of the PID's and open your task manager. the task manager will have each process and its PID so you will know exactly what is running, and which port it is accessing. hope this helps

 

Hello.

After all, I reached the conclusion that Symantec Endpoint Protection software has a bug and is issuing the false positive attacks from the DNS server (my router, in this case), due to that bug - http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010050107362048?OpenDocument&seg=ent&Click=.

I followed the workaround and I had no more issues.

Thanks and best regards