One of my many friends who I have gotten on to Avast Antivirus is getting port scanned on ports 135, 137, 138 ,139, 143, 80 By Akamai ,this is also coming through the avastsvc. Does avast have anything to do with this apparently seedy company, he is being port scanned and getting ack scanned by Akamai approximately 300 times a day from hours of 08:00 to 03:00 EST every day.
Why would some of these scans come through the avastsvc?
UDP/TCP and ack Port scans every 3-7 minutes, per 21 hours of each day is enough reasons to have against Akamai.
Ports are being opened to Akamai via the avastservice.
Ports being opened for Avast=Acceptable.
Ports being opened for Akamai=unacceptable.
If a program or product by Akamai was in use then perhaps this would be normal, however with just a desktop running and no programs running except Avast and firewall running Akamai port scans every 3-7 minutes or so.
For all I know there may be something terribly sinister happeninfg on your friend’s PC but I cannot base that conclusion solely on what you have described.
AFAIK Akamai is a mirroring service used by hundreds of companies.
I hope I’ve understood you correctly. Are we talking ‘avast! Free’ and and a non-avast! firewall?
I don’t understand what you mean by “Ports being opened” in relation to avast!. ‘avastsvc’ scans incoming traffic for malware on the ports you mentioned previously. ‘avastsvc’ is not a firewall. Who/what is indicating to you that the incoming “Port scans” are from Akamai and addressed to ‘avastsvc’?
In any case, avast! has nothing to do with Akamai.
(Even though, like Vladimyr, I don’t think there’s anything wrong about Akamai - as far as I remember, it was/is(?) used even to distribute Microsoft updates, and certainly many other stuff… just an ordinary CDN, like a number of others.)
Didnt think this was worth a new topic since I found it by googleing “Akamai avast” to confirm that is who is hosting their services.
I saw it in the active connections for the service whilst net limiter was running (I was wondering what was chewing at my upload bandwidth) and saw avast was doing stuff despite being in “silent mode”. I dont suppose it was anything nefarious though, just the program doing its thing with your net traffic.
Akamai is a partner in aiding with various Cloud Services and is also is into protection with Akamai’s Kona Site Defender looking to thwart online attacks.
So I would not worry that much,
Akamai is a partner in aiding with various Cloud Services and is also is into protection with Akamai's Kona Site Defender looking to thwart online attacks.
This is what causing the activity you are seeing. I have noticed a definite spike in Akamai connections since they implemented their Site Defender service. Time will tell if it's just another spyware facility. The Internet is such a cesspool today I guess another spyware service won't make much difference.
Do not always look for the dark side of it, also see the bright side. I really cannot see what harm that could do you personally nor me for that reason.
This should be seen in a much wider cyber-perspective :D. Besides they do it because they have the “rack-capacity” to do it,
As had been said Akamai is deeply embedded in the entire internet structure and provides functionality and services for myriads of other companies. It is safe and pretty unobtrusive all things considered.