ZONE ALARM QUESTION..........wtf are these???

[23 Gauge]

For you bros out there that use Zone Alarm - what are all these alerts I get saying this:

"The firewall has blocked Internet access to your computer (HTTP) from 209.180.255.81 (TCP Port 3463) [TCP Flags: S].

Time: 10/11/2001 6:37:44 AM"

I never used to run ZA until a few weeks ago when a tech support guy told me to unplug my computer because someone was mostly hacked into my computer.

WTF are these alerts?

Thanks,

23G

 

[23 Gauge]

BUMP

Anyone know anything?

 

[hard]

You need to download " zonelog" made by another co. ( sorry no link 4 u rt now- try google search ) .. This companion prog. will help u make sence of the cryptic messages that z.alarm spits out.

You can back trace that IP address as well and see who it is. I'll have a quick look 4 u and post results.

ps- zonealrm rules - if you have latest version you are hackproof unless it's the NSA knockin!

 

[kbp74]

Yeh I get them

Many or nothng to worry about

If you use ISP;s like AOL, ETC that use Proxy Servers then you will get these messages. 8/10 of the notifications I get from ZA are from my ISPs servers.

 

[hard]

Here you go bro. If you suspect you are being hacked it's coming from a US west account. Give the coordinator a call and let hum know. If you can send him a copy of your zone alarm log that will help him . Good luck!


[Query: 209.180.255.81, Server: whois.arin.net]

U S WEST - Interact Internet Services (NETBLK-USW-INTERACT97)
600 Stinson Blvd NE
Minneapolis, MN 55413
US

Netname: USW-INTERACT97
Netblock: 209.180.0.0 - 209.181.255.255
Maintainer: USW

Coordinator:
U S WEST ISOps (ZU24-ARIN) [email protected]
612-664-4689


[End of Data]

 

[23 Gauge]

Thx Bro

I get on average about 25 or so of these alerts a day. I think I may have a trojan that Norten isn't catching.

Do you use their 'whois' program to look up IP addys? If not, can you PM me with a good IP addy tracker. I use www.arin.net/whois/index.html and allthough it is vague, it still lets me know what server they are on.

 

[23 Gauge]

I just talked to Qwest

The guy on the phone said that with Zone Alarm, you are pretty much untouchable unless it's a gov't agency or some high-powered hackers trying to get in.

Bro's, to those of you that don't use ZA, go to www.zonealarm.com and get it. You'll be amazed by how many of these little bastard fuckers are trying to get into your computer.


Thanks for your help fellas.......

23 G

 

[BigWh1tey]

Most of your alerts are nothing to worry about ( just pings from other computers ) if you hit the more info button after hitting the alerts tab , you'll get the down low.

 

[hamper19]

ok....with ZA, i believe there is an option for "more info" and it should bring u to a site and tell you the deal

lots of things out there can hit your machine like that.......its probably from your own subnet,.......i wouldnt worry,...chances are your NIC just picked up a packet somewhere..and alerted you......it definately should have discarded it.

HTTP alerts are common....if you get anything that uses smtp, it is looking over the entire network, so u will end up getting random alerts...

h19

Black Ice is a good one if you want to check that out

 

[hempster]

THERE ARE SOME DAYS I GET OVER 500 ALARMS FROM ZONEALARM . I HAVE BEEN USING IT OVER A YEAR OR TWO.
AFTER A WHILE YOU RELIEZE YOUR IP ADDRESS GETS SCANNED TONS OF TIMES EACH DAY ,YOU JUST DID NOT KNOW IT BEFOR!
JUST MAKE SURE THE TWO SLIDERS FOR SECURITY ARE ON HIGH IN ZONE ALARM AND RELAX ..
HEMPSTER

 

[Ercole]

Is there any big reason to pay $40 for ZOne Alarm Pro? Or is the free program sufficient?

 

[EngiCream]

There is really no reason to spend the extra money for the pro version. Just stick with the free one. If you get tired of it there are always plenty of other free firewalls available.