Firewall hits.

Discussion in 'other firewalls' started by the_1_wonder, May 27, 2007.

Thread Status:
Not open for further replies.
  1. the_1_wonder

    the_1_wonder Registered Member

    Joined:
    May 27, 2007
    Posts:
    1
    Hi, I'm new to the forums but it looks as though there are many of you that are very experienced with software and I was hoping you could help me out. I've VERY recently been getting hits on my ZA Firewall from "192.168.1.89". Never the same port, and it's happing 5-6 times every hour. I haven't downloaded anything recently, and I really don't understand why this is happening. One of the alerts from my ZoneAlarm informed me it was coming from '.in-addr.arpa" I googled it but was unable to find much helpful information about the IP or the .in-addr.arpa. Would any of you know what is going on or how to stop this? Any place I can get a good (and free) anti-virus?
     
    the_1_wonder, May 27, 2007
    #1
  2. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    acr1965, May 27, 2007
    #2
  3. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    Are you on dialup?

    Do you have a LAN?

    Does this continue if you log off - log back on?

    regards,

    -rich
     
    Rmus, May 27, 2007
    #3
  4. -NiCeGuY-

    -NiCeGuY- Registered Member

    Joined:
    Mar 5, 2007
    Posts:
    79
    in-addr.arpa - reverse DNS lookup for IPv4 addresses

    http://en.wikipedia.org/wiki/.arpa
     
    -NiCeGuY-, May 27, 2007
    #4
  5. steve161

    steve161 Registered Member

    Joined:
    Nov 22, 2006
    Posts:
    681
    Location:
    New York
    Info on 192.168.1.89. Do you have DSL/Router? I would think that is the cause.


    OrgName: Internet Assigned Numbers Authority
    OrgID: IANA
    Address: 4676 Admiralty Way, Suite 330
    City: Marina del Rey
    StateProv: CA
    PostalCode: 90292-6695
    Country: US

    NetRange: 192.168.0.0 - 192.168.255.255
    CIDR: 192.168.0.0/16
    NetName: IANA-CBLK1
    NetHandle: NET-192-168-0-0-1
    Parent: NET-192-0-0-0-0
    NetType: IANA Special Use
    NameServer: BLACKHOLE-1.IANA.ORG
    NameServer: BLACKHOLE-2.IANA.ORG
    Comment: This block is reserved for special purposes.
    Comment: Please see RFC 1918 for additional information.
    Comment:
    RegDate: 1994-03-15
    Updated: 2002-09-16

    OrgAbuseHandle: IANA-IP-ARIN
    OrgAbuseName: Internet Corporation for Assigned Names and Number
    OrgAbusePhone: +1-310-301-5820
    OrgAbuseEmail: abuse@iana.org

    OrgTechHandle: IANA-IP-ARIN
    OrgTechName: Internet Corporation for Assigned Names and Number
    OrgTechPhone: +1-310-301-5820
    OrgTechEmail: abuse@iana.org

    # ARIN WHOIS database, last updated 2007-05-26 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
     
    steve161, May 27, 2007
    #5
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...