Firewall hits.

Discussion in 'other firewalls' started by the_1_wonder, May 27, 2007.

Thread Status:
Not open for further replies.
  1. the_1_wonder

    the_1_wonder Registered Member

    Joined:
    May 27, 2007
    Posts:
    1
    Hi, I'm new to the forums but it looks as though there are many of you that are very experienced with software and I was hoping you could help me out. I've VERY recently been getting hits on my ZA Firewall from "192.168.1.89". Never the same port, and it's happing 5-6 times every hour. I haven't downloaded anything recently, and I really don't understand why this is happening. One of the alerts from my ZoneAlarm informed me it was coming from '.in-addr.arpa" I googled it but was unable to find much helpful information about the IP or the .in-addr.arpa. Would any of you know what is going on or how to stop this? Any place I can get a good (and free) anti-virus?
     
  2. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
  3. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    Are you on dialup?

    Do you have a LAN?

    Does this continue if you log off - log back on?

    regards,

    -rich
     
  4. -NiCeGuY-

    -NiCeGuY- Registered Member

    Joined:
    Mar 5, 2007
    Posts:
    79
    in-addr.arpa - reverse DNS lookup for IPv4 addresses

    http://en.wikipedia.org/wiki/.arpa
     
  5. steve161

    steve161 Registered Member

    Joined:
    Nov 22, 2006
    Posts:
    681
    Location:
    New York
    Info on 192.168.1.89. Do you have DSL/Router? I would think that is the cause.


    OrgName: Internet Assigned Numbers Authority
    OrgID: IANA
    Address: 4676 Admiralty Way, Suite 330
    City: Marina del Rey
    StateProv: CA
    PostalCode: 90292-6695
    Country: US

    NetRange: 192.168.0.0 - 192.168.255.255
    CIDR: 192.168.0.0/16
    NetName: IANA-CBLK1
    NetHandle: NET-192-168-0-0-1
    Parent: NET-192-0-0-0-0
    NetType: IANA Special Use
    NameServer: BLACKHOLE-1.IANA.ORG
    NameServer: BLACKHOLE-2.IANA.ORG
    Comment: This block is reserved for special purposes.
    Comment: Please see RFC 1918 for additional information.
    Comment:
    RegDate: 1994-03-15
    Updated: 2002-09-16

    OrgAbuseHandle: IANA-IP-ARIN
    OrgAbuseName: Internet Corporation for Assigned Names and Number
    OrgAbusePhone: +1-310-301-5820
    OrgAbuseEmail: abuse@iana.org

    OrgTechHandle: IANA-IP-ARIN
    OrgTechName: Internet Corporation for Assigned Names and Number
    OrgTechPhone: +1-310-301-5820
    OrgTechEmail: abuse@iana.org

    # ARIN WHOIS database, last updated 2007-05-26 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
     
Loading...
Thread Status:
Not open for further replies.