Sygate Firewall

After recently installing Sygate I have a icon in my sytem tray. Ocassionally it starts blinking to inform me that someone is scanning my computer. I recognize some of the IP addresses as being from my ISP. Some of them I don't know where they come from. Is this normal??? The threat column in the report says minor but it still kinda freaks me out. Has this always happened and I just didn't know about it before??
Thanks,
T.Blue

 

I have Sygate,and my provider is Comcast,and they come in every now and then to peek I guess. If I block them,then I cannot get on the internet,I think it's Comcast Support,Oh well I have nothing to hide.

 

TBlue

I don't have Sygate but I did install Zone Alarm. I got weird things at first also. If you have a router it can be the communication between them. As far as sites tring to get reach you, do you have anything that auto updates. I am just making some guesses here. Have you used ARIN to put in the IP address that is trying to reach you, or go to the site (obviously have to be careful).

 

No I have never utilized that site but will check it out. I have never gone to any of the sites that it show are scanning...didn't really want to do that. The report can give a few details on the IP's but it doesn't do it on all of them. Thats whats kinda scary. Just wondering if its actually someone looking to exploit an unprotected machine??? It happens pretty reguarly.
I don't have a router. I have an external cable modem. Not the same right??

 

No, they are not the same. Use ARIN. Plug in the address and it will tell you who it is. You should be able to get it from Sygate program, I can with ZoneAlarm.

 

ok thanks

 

tblue, you can go into the security log, right-click on the remote host, and select "back-trace"; that will display the remote's info. Have you done the security test (main menu) yet? There may be something still open that's attracting scanning.

 

The backtrace option is what I was doing. Some show the name and some don't. No I haven't done the security test. Didn't know about it...guess I should though. Will do this evening when I get home.
Thanks

 

The security test didn't find anything abnormal that I could tell. Is ANYBODY out there having these same occurences and am I just being paronoid???
I disabled the icon in the system tray, so I don't know if someone is scanning but I bet they are.....
Thanks, T.Blue

 

Sygate is just informing you that someone is scanning your ports. The fact that it is catching it (and alerting you) means it is doing it's job. I used to get them every once in a while, especially from my ISP when I was running heavy D/L traffic.

 

Comcast comes in a scans me about once a week,maybe there coming into say hi,,,,, ,,,Don't matter to me I have nothing to hide,if I block them then I cannot get on the net. And life goes on,Hi Comcast,I'm here at MajorGeeks now,,,,Woooohooooooo

 

Yes, what Just Playin says- Firewall is working. I used to get scanning alarms constantly with McAfee; switched to Sygate, and scans are rare (almost all are from ISP). When you did security test, did all ports show "stealth"? If so, you're golden!

 

All my ports are blocked,,, Just Port 80 is not blocked and I think that's the internet.

 

Yep they all showed stealth. So I'm alright.
Thanks for info.
T.Blue

 

Hi,

regarding this issue.. how do I block the ports?? not all are blocked, some show as closed, and some as blocked..

just started using sygate so i'm not too familiar...

I get HUNDREDS of items in the security log... think it's MAC Spoofing or sumthing like dat.. I'm styain' in this apartment place, so basically one ISP provides to the whole building.. so i'm not sure if it's the ISP, or actually someone else within the building...

--edit--
sorry, hundreds is traffic log..
security log, there's this one particular IP every 10 minutes... is this a bad thing ??