Blocked Access

Running Zone Alarm. Been getting numerous hits over the last several weeks that Zone Alarm blocks. (12 in the last 30mins) Most are from the far east, some are from ISPs. Is there anything on my end that cues these folks to try and access when I'm on line? Or is this just random dumb luck?

 

Unless you are seeing repeated probes from a single IP to ports 1024, 1025, 1026, 1027, 1243, 12345 or 27374 then the "hits" are almost certainly coincidental and the result of normal background noise, random scanning, a compromised server, etc, etc. They’re perfectly harmless - whatever the cause.

An interesting article (I don't agree with all that he says though!).

 

Thanks Brett.

Unless you are seeing repeated probes from a single IP to ports 1024, 1025, 1026, 1027, 1243, 12345 or 27374 then the "hits" are almost certainly coincidental and the

I am getting the repeated probes on most of these ports. Anything I can/should do?

 

What should you do? I’d suggest nothing. The probes are harmless whilst your firewalled.

What could you do? Report it. However, as the recorded IP’s might well be spoofed, this is often a complete waste of time.

 

My Norton Internet Security was getting hammered the same on pretty much the same ports.

I installed a Router ( mainly for other reason ) and now the Router is taking ( and blocking ) all of the hits.

I just looked at the incoming log for the Router. WOW, am I glad that I have the Router. Norton would be working overtime and then some without it.

But I am on Cable Modem so maybe I would tend to get mor hits.

But the Router only Blocks incoming so a Software Firewall is also need to control the outgoing.

One suggest that I do have.

If it is not needed, make sure the File and Printer Sharing is not bound to TCP/IP.

BillyBob