ZoneAlarm query
18 July 2002, 09:46 AM
#1
Scooby Regular
Thread Starter
Join Date: Dec 2000
Posts: 525
Likes: 0
Received 0 Likes
on
0 Posts
After surfing the net at my companies expense for many years I've finally got a PC in the house.
I'm connected to the net thru a 56K dial up modem on Freeserve Anytime. On the advice of a mate I installed ZoneAlarm. I'm getting an alert on average once every half hour. Is this normal? The alerts look like this
The firewall has blocked Internet access to your computer (HTTP) from 68.67.93.7 (TCP Port 4504) [TCP Flags: S].
Time: 7/18/02 9:16:40 AM
Is this normal and proves ZoneAlarm is doing its job? I've checked thru the log and the same IP address never appears twice.
Cheers for listening
Colin.
I'm connected to the net thru a 56K dial up modem on Freeserve Anytime. On the advice of a mate I installed ZoneAlarm. I'm getting an alert on average once every half hour. Is this normal? The alerts look like this
The firewall has blocked Internet access to your computer (HTTP) from 68.67.93.7 (TCP Port 4504) [TCP Flags: S].
Time: 7/18/02 9:16:40 AM
Is this normal and proves ZoneAlarm is doing its job? I've checked thru the log and the same IP address never appears twice.
Cheers for listening
Colin.
18 July 2002, 10:24 AM
#2
Scooby Regular
Join Date: Jul 2001
Posts: 1,112
Likes: 0
Received 0 Likes
on
0 Posts
That's probably your own ISP, run up a DOS prompt and type in ipconfig - this will return your own IP address. Probably something like 68.67.93.x - if it is then it's just your ISP and nothing to worry about.
18 July 2002, 12:03 PM
#4
Scooby Regular
Join Date: Jul 2001
Location: maturin23 - 205GTi Drivers.com
Posts: 504
Likes: 0
Received 0 Likes
on
0 Posts
Big Col - if you're only getting hit once every half hour you've nothing to worry about.
When the IIS Worm was causing havok I was getting hit hundreds of times an hour.
There seems to be a type of Internet user who runs applications that speculatively try loads of IP addresses to get a response - normally completely random and Zone Alarm prevents a response being sent back. Basically looks like you are not connected.
There's an analyser built into ZA that can show if an individual IP address is making repeated attempts to access your system - if that's the case, then using the 'look up this IP' funtion you can make a compliant to the offender's ISP.
I just ignore them and check the analyser from time to time.
When the IIS Worm was causing havok I was getting hit hundreds of times an hour.
There seems to be a type of Internet user who runs applications that speculatively try loads of IP addresses to get a response - normally completely random and Zone Alarm prevents a response being sent back. Basically looks like you are not connected.
There's an analyser built into ZA that can show if an individual IP address is making repeated attempts to access your system - if that's the case, then using the 'look up this IP' funtion you can make a compliant to the offender's ISP.
I just ignore them and check the analyser from time to time.
Thread
Thread Starter
Forum
Replies
Last Post