| View previous topic :: View next topic |
| Author |
Message |
Guest
|
Posted: Thu Apr 18, 2002 16:37 pm Post subject: Repeat ZoneAlarm Hits Bugging Me |
|
|
For the last three days each time I have signed online using a variety of my usernames through my ISP. I am getting regular Zone Alarm hits every one minute, hundreds of them. Always to my port 6346. Always from IP 24.196.76.30
Its trying to get into my 3000's and 4000's ports.
Here is what ZA says:
ZoneAlarm blocked an incoming connection attempt to port 6346 on your computer. This port is typically used by the Gnutella file sharing tool, so this may have been a legitimate attempt by users to search for or download files shared by your computer. However, it could also have been a port scan by a remote computer trying to determine additional details about your machine.
I am not using any file sharing tool. I am glad I have a firewall! Looks like I need it. Any idea WHY I am being picked on?????????? |
|
| Back to top |
|
 |
thegame412
Guest
|
Posted: Thu Apr 18, 2002 22:00 pm Post subject: Firewall problem |
|
|
| This may just mean that you have your zonealarm security settings set to high on the local and or internet zones. Depending on what ISP you are using, you may encounter using the net if zonealarm is seet to high for local and/or internet zones. you can configure zonealarms to just log these messages and not notify you with pop up messages. Or you can set your zonealarm to medium level. |
|
| Back to top |
|
 |
netbuilder

Joined: 18 Feb 2002 Posts: 155 Location: Canada
|
Posted: Fri Apr 19, 2002 0:23 am Post subject: |
|
|
based on the IP you gave in your post, the probe originates from;
24.196.76.30.mad.nc.chartermi.net
If chartermi.net is your ISP then ask them why they are looking for the presence of file sharing software on your computer. Some ISPs conduct scans of there ports to determine if server software (web, ftp, smtp, file sharing , etc) are being run. Some consider it to be a violation of their TOS.
If chartermi.net is not your ISP then you should launch a complaint through your ISP's abuse group about the constant probing from this other location. _________________ Ric Knight
NET Builder
www.netbuilder.to |
|
| Back to top |
|
 |
Guest
|
Posted: Fri Apr 19, 2002 16:07 pm Post subject: |
|
|
Thanks so much NetBuilder!
I have been using this ISP (which is Not Chartermi.net) for six months and running my ZoneAlarm on High/High and haven't had a problem until the last few days. Your answer is greatly appreciated. I will try to report them.
One day this week I also got 18 hits from 68.35.59.108 all Port 7001
which started during my logging online process. I seem to be getting hits during my logging on......so here's what I am trying......I set the ZoneAlarm LOCK, then dial up my connection and log in. Then I UnLock and surf. So far this has seemed to be working. Although I cannot be sure it is not a coincidence.
Thanks again........  |
|
| Back to top |
|
 |