Printable View
Hi, I have Zone Alarm 8 (free) installed on Win XP. I also have just installed
KFSensor (a honeypot). This KFSensor is telling me I have five visitors on my PC. One is 125.89.77.122 which traceroutes/whois to CHINA. Is China hacking me? Is Zone Alarm useless? Do they still make that other firewall (though the name eludes me)? What is going on here and what can I do? Thankyou for all advice.
You probably have some piece of scumware on your machine calling home....
scan your machine with malwarebytes....
MLF
"China" is a country. This would be like me refeshing this page and saying that my browser is connected to the entire state of Connecticut.
Maybe China has those Carrier pidgins that can carry packets like in that old ass video. :)Quote:
Originally Posted by The-Spec
Actually you could base64 encode files to have them printable to paper...
then just tie it to all of these lil' four foot tall asians.
LOL DUDE straight from the horses mouth...
Quote:
KFSensor is a Windows based honeypot Intrusion Detection System (IDS).
It acts as a honeypot to attract and detect hackers and worms by simulating vulnerable system services and trojans.
By acting as a decoy server it can divert attacks from critical systems and provide a higher level of information than can be achieved by using firewalls and NIDS alone.
No firewall is going to prevent conversations YOU INITIATE. You are broadcasting to the INTERNET "HEY EVERYONE LOOK AT ME". Your firewall knows this and will let anyone look.
:rolleyes:
Ah give him a break. Just because the thread has probably ruined a few keyboards today doesn't mean I can't leave it open for us to teach others from ;)Quote:
Originally Posted by dinowuff
Remember everyone - NOT all keyboards can be put in a Dishwasher after you shoot Coffee out of your nose laughing!
;) *Sorry I couldn't stop laughing when I read that someone finally pointed out the obvious to them that saying hi to every miscreant on the net is going to have a response*.
Thanks Dinowuff !
Maybe people post things they already know so they'll have a reason to respond with, "I like and identify with you."
Perhaps you should join the *******............I am sure that you would feel at home there ;)Quote:
What is going on here and what can I do? Thankyou for all advice.
EDIT:
1. Is this the one you were thinking about?
http://free.agnitum.com/
Here is a relative newcomer:
http://www.tallemu.com/
As already noted, if you are running a honeypot you are inviting traffic so please don't blame the firewall.
2. There are so many compromised machines in the World these days that just because an IP address resolves to a particular country, does not mean that is where the attacker is operating from. Last I read for China was a ratio of 2:1 externally controlled bots to local Chinese ones.
I like and identify with you...
nuff said
Hey, The-Spec
Looks like you have a personal invite to join the *******?Quote:
I like and identify with you...
nuff said
:umph: