 Scary Message From Zonealarm, What Does It Mean? |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.| Important Announcement: We have two terrific contests running on the site that I wanted all our members and guests to know about. The first contest is the HP Magic Giveaway, which is underway as of November 28th. More information can be found at this topic, which will be updated very soon with further information. The second contests, is for the chance to win two Seagate FreeAgent external hard drives. More information about this contest can be found here. These are both amazing contests and I suggest everyone submit an entry for them. - BleepingComputer Management |
  |
 Jul 16 2006, 08:41 AM
Post
#1
|
|
 Bleepin' Night Watchman  Group: BC Advisor Posts: 1,767 Joined: 5-December 05 From: The City of Saint Francis, by the western sea Member No.: 43,307  |
Looking at the event log on ZoneAlarm, I found this entry: QUOTE Description Packet sent from 172.20.4.53 (TCP Port 57384) to 172.20.4.36 (NetBIOS Session) was blocked Rating High Date / Time 2006/07/14 23:30:46-4:00 GMT Type Firewall Protocol TCP (flags:S) Program Source IP 172.20.4.53:57384 Destination IP 172.20.4.36:139 Direction Incoming Action Taken Blocked Count 1 Source DNS Destination DNS COLOSSUS The explanation from Zonelabs is: QUOTE ZoneAlarm Pro prevented a remote computer from connecting to port 139 on your computer. If you are sharing files on a local network, this connection attempt was probably legitimate network traffic. Port 139 is commonly used by networked Windows computers to enable file sharing and other resource sharing. However, if the traffic that generated this alert came from the Internet rather than a local network, this may have been attack on your computer I'm not sharing files on a local network. Was this an attack? This post has been edited by Amazing Andrew: Jul 16 2006, 08:43 AM -------------------- root@bleepingcomputer>./sig_file
Signature Not Found. |
 |
 
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 4th December 2008 - 03:55 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.