svchost was blocked from accepting a connection ... (ZA Pro), everything's OK?

Discussion in 'other firewalls' started by Eng, Dec 15, 2005.

Thread Status:
Not open for further replies.
  1. Eng

    Eng Guest

    Hi folks,

    Successfully using ZA Pro 6.1.737.000 but have discovered in logs table that "Generic Host Process for Win32 Services was blocked from accepting a connection from the Internet (169.254.20.60 Port 2250)." This event occurs repeatedly with other IP (169.254.20.56 Port 2250) as well. Smart Defense has labelled svchost.exe as "system" with access to all except internet in server column. I searched for the above IP and have found out following info:

    Search results for: 169.254.20.60

    OrgName: Internet Assigned Numbers Authority
    OrgID: IANA
    Address: ...
    City: ...
    StateProv: ...
    PostalCode: ...
    Country: ...

    NetRange: 169.254.0.0 - 169.254.255.255
    CIDR: 169.254.0.0/16
    NetName: LINKLOCAL
    NetHandle: NET-169-254-0-0-1
    Parent: NET-169-0-0-0-0
    NetType: IANA Special Use
    NameServer: BLACKHOLE-1.IANA.ORG
    NameServer: BLACKHOLE-2.IANA.ORG
    RegDate: ...
    Updated: ...

    Can someone explain what's going on. Am I in danger?

    Any help is appreciated.

    Thanks and regards,
    Eng
     
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,215
    Hi,
    Blocked is good.
    You probably are not in danger.
    My firewall(s) have in the past and in still in the present often blocked / block various attempts to connect to ports from outside, mainly spam messages.
    If you fear for your system, you can try running scanners.
    Did you check your firewall vs grc or sygate port scan test?
    If all ports are closed / stealthed you're set.
    Mrk
     
  3. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Do you have any more log details on protocol and other port/service used?
    The IP in question is usually used by systems that do not have an IP assigned or having trouble obtaining an IP.

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.