OH CRAP!!??? what's going on here???
Posted: Thu May 10, 2001 11:44 pm
Ok, I come back from a nice day with friends and seeing a movie, a rare treat from my digital computer life normally....and look at my demo version of Zone Alarm Pro...<hint>anyone out there know how to make my demo a full version?</hint> and see 235 ALERTS!!!! wow, that's a big number!!
Some alerts are FTP hits, (TCP Port 3149)(TCP Flags S), what does the S mean for the flags? is that a security level for ZOne Alarm??
Some alerts are HTTP, TCP Port 38852, Flag S, most are ICMP Echo Request, Pings as well.
Yea, I'm scrolling through the alerts as I type this, about 50 in a row, in a time span of only 5 minutes, are the IMCP echo requests, all from different IP's.
Ok...scrolled through some more, about 200 are IMCP echo pings, and the rest were a mix of TCP, HTTP, DNS, and NetBios alerts.
Is this something I should worry about? The most alerts I've gotten before was like maybe 10 in a day, I usually don't get 10 in a month....the More Info buttong doesn't give me more info, all the IP addresses come back with no information.
I'm not really worried, they are just pings after all, and since I'm in stealth mode, whoever pinged me doesn't even know I am there...is this the work of "hacker script kiddies" or normal ISP pings, or what? If you need more info, I'll give it.
Thanks in advance.

Some alerts are FTP hits, (TCP Port 3149)(TCP Flags S), what does the S mean for the flags? is that a security level for ZOne Alarm??
Some alerts are HTTP, TCP Port 38852, Flag S, most are ICMP Echo Request, Pings as well.
Yea, I'm scrolling through the alerts as I type this, about 50 in a row, in a time span of only 5 minutes, are the IMCP echo requests, all from different IP's.
Ok...scrolled through some more, about 200 are IMCP echo pings, and the rest were a mix of TCP, HTTP, DNS, and NetBios alerts.
Is this something I should worry about? The most alerts I've gotten before was like maybe 10 in a day, I usually don't get 10 in a month....the More Info buttong doesn't give me more info, all the IP addresses come back with no information.
I'm not really worried, they are just pings after all, and since I'm in stealth mode, whoever pinged me doesn't even know I am there...is this the work of "hacker script kiddies" or normal ISP pings, or what? If you need more info, I'll give it.
Thanks in advance.