I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to my computer. For some reason my router slows up my download speed - I have already tried fixing it with no luck, it's probably outdated. Anyway after I hooked up directly via cable SEP started notifiying me that I am being port scanned by a certain IP which is not a part of my network. It's European. SEP automatically blocked the IP for 600 seconds. After that I noticed that I have been port scanned continously by different IP's from around the world. As I understand this is quite normal and not something I should be concerned about if I am behind a firewall. However, the previously mentioned IP keeps port scanning me about every minute repeadetly along with other various IP's. After I connected through wireless on my router I noticed that the SEP doesn't log these IP's anymore but my router does. I already blocked the IP in SEP. But it keeps scanning me which is visible in my router log. The router isn't capable of blocking the IP connections like SEP.
I would like to know what else can I do to improve my security?
Which ports should I keep open and which ports should I close? If I understand correctly the IP's are scanning for open ports that are vournable however aren't certain ports always open in order for the internet to work?
I don't have any ports forwarded on my router. There are some application specific ports open in the windows firewall. Can I get hacked through these ports?
Is heavy port scanning the reason behind slow router/wireless speeds?
Why am I being targeted by the same IP repeadetly? Is someone trying to hack my computer?