Skip to comments.
475 hits reported by ZoneAlarm in last 20 minutes
self
Posted on 02/26/2002 7:17:50 AM PST by freedom9
I noticed a lot of activity on my connection when there shouldn't have been, so I installed ZoneAlarm and (it's at 491 attempts now), checked it out.
They seem to be coming from all over the world.
Does anybody else have ZoneAlarm installed and can they please tell me if this is normal?
Thanks
TOPICS: Miscellaneous
KEYWORDS: computersecurityin; techindex
Navigation: use the links below to view more comments.
first 1-20, 21-40, 41-60, 61-80 ... 121-140 next last
1
posted on
02/26/2002 7:17:50 AM PST
by
freedom9
To: freedom9
You should be very scared and paranoid about this.
It's for your own good.
2
posted on
02/26/2002 7:24:33 AM PST
by
Vladiator
To: freedom9
It would help if we knew what the hits were. Source IP address, destination port, et cetera...
3
posted on
02/26/2002 7:26:32 AM PST
by
Poohbah
To: Poohbah
The list max'ed out at 500 attempts and I had to reset it.
these are just a few of the ones on the new log which is at 91 now.
FWIN,2002/02/26,08:14:22 -6:00 GMT,198.29.2.7:2577, (flags:S)
FWIN,2002/02/26,08:14:33 -6:00 GMT,66.76.143.167:3204, (flags:S)
FWIN,2002/02/26,08:14:36 -6:00 GMT,62.110.175.182:1226, (flags:S)
FWIN,2002/02/26,08:14:38 -6:00 GMT,62.251.70.85:4029, (flags:S)
FWIN,2002/02/26,08:14:41 -6:00 GMT,217.81.158.175:1247, (flags:S)
FWIN,2002/02/26,08:14:42 -6:00 GMT,212.199.140.239:1685, (flags:S)
FWIN,2002/02/26,08:14:53 -6:00 GMT,195.216.115.101:21591, (flags:S)
FWIN,2002/02/26,08:14:54 -6:00 GMT,80.132.130.236:2667, (flags:S)
FWIN,2002/02/26,08:14:54 -6:00 GMT,62.163.5.216:1313, (flags:S)
FWIN,2002/02/26,08:14:54 -6:00 GMT,4.33.108.140:27036, (flags:S)
FWIN,2002/02/26,08:14:58 -6:00 GMT,62.243.149.183:51163, (flags:S)
FWIN,2002/02/26,08:15:01 -6:00 GMT,62.248.235.22:4979, (flags:S)
4
posted on
02/26/2002 7:37:29 AM PST
by
freedom9
To: freedom9
Everyone who installs ZoneAlarm is shocked at the number of hits initially, as I was. Check the logs to see if there is a single IP address that is trying various ports. If so, someone at a specific place may be trying to crack your system. What the abbreviated list you posted seems to indicate, though, is that it's coming from various places; this is not an indication of a cracker in itself...necessarily.
This was happening to your system prior to ZoneAlarm - you're just seeing it now. Scary, hmm?
To: freedom9
I have McAfee's Internet Security that has a monitor. That monitor shows constant hits, but does not have a count.
Beats me why this happens. I'll watch this thread to see what develops.
To: freedom9
I installed zone alarm over a year ago. The hits will get fewer and fewer as time goes on. I havent had a hit in months. But you might have a Trojan in your system. Think about getting an Anti-virus program at this point to clean out your system; the bucks spent might be well worth it.
7
posted on
02/26/2002 7:49:35 AM PST
by
xinga
To: gortklattu
For the Macafee system you have;does it require a disc to load? Or Is the software available from their site?
8
posted on
02/26/2002 7:50:59 AM PST
by
cardinal4
To: xinga
9
posted on
02/26/2002 7:52:15 AM PST
by
mikeb704
To: freedom9
I've got Zone and I've never had hits like that.
10
posted on
02/26/2002 7:54:21 AM PST
by
HangFire
To: freedom9
i too just installed it a few weeks ago but i only get two or three intrusions a night when i'm on............... there is a site where you can check the address and it brings up the name of the intruder.
11
posted on
02/26/2002 7:54:50 AM PST
by
angcat
To: freedom9
Does anybody else have ZoneAlarm installed and can they please tell me if this is normal? Do you have a bomb shelter? Stocked with beer?
Go to it and start to drink. Heavily.
12
posted on
02/26/2002 7:55:10 AM PST
by
Fury
To: freedom9
Does anybody else have ZoneAlarm installed and can they please tell me if this is normal? I think it's abnormally high. Set your security settings to 'high' -- this may mask your ip address. What is probably happening is that people are scanning across network domains, trying to find computers that have file sharing open. Go to one of those web sites which does security checks and test your security settings with the firewall in place.
Try www.hackerwhacker.com
To: freedom9
Install adaware also. It is free and will clean your system of spyware.
After I installed ZA I got loads of hits but they decrease after time. Most are harmless and include pings from your ISP. If you do not have a good Anti-Virus program installed, do so now. And keep the definitions current.
To: freedom9
Are you running KaZaA, Morpheus, or any other music / file sharing software?
To: freedom9
I am very familiar with Zone Alarm and this is not normal. The most probable explanations are that 1) You have a virus on your machine that is repeatedly using your connection to transmit the viruses activities, 2) Your computer has been tagged as a mirror site by a file/transfer program. In any case, unplug your internet connection immediately until you can track down the problem and secure your system.
16
posted on
02/26/2002 8:07:14 AM PST
by
rs79bm
To: New Horizon;freedom9
Are you running KaZaA, Morpheus, or any other music / file sharing software? This is a good point. Unless it's only a few users constantly hitting your computer, it seems unusual to have that many hits. Something seems to be drawing users to your ip address.
To: freedom9
I have had Zone Alarm for well over a year, now. I have never had that many hits in a month, muchless in less than a day. Something is wrong-- the trojan idea someone mentioned sounds like a possibility.
To: freedom9
To: Ernest_at_the_Beach
I have had quite a number of hits recently but not that many!
Navigation: use the links below to view more comments.
first 1-20, 21-40, 41-60, 61-80 ... 121-140 next last
Disclaimer:
Opinions posted on Free Republic are those of the individual
posters and do not necessarily represent the opinion of Free Republic or its
management. All materials posted herein are protected by copyright law and the
exemption for fair use of copyrighted works.
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson