Member Avatar for blackbelt27

i recently installed zone alarm a few hours ago and it has blocked1180 intrusions and 10 of which were serious... all from diffrent IP's what the heck should i do

  • 3 Contributors
  • 2 Replies
  • 137 Views
  • 16 Hours Discussion Span
  • Latest Post Latest Post by steven woodman

Dani AI

Generated

Quick summary and practical next steps. The flood of connection attempts you described is common on internet-facing PCs: automated scanners and compromised hosts probe millions of IPs every day. is right that a working firewall will log and block that noise, and is right to recommend an antivirus/anti‑malware sweep if anything might have been active before the firewall was installed.

Checklist to work through now:

  • Inspect ZoneAlarm’s log entries to see direction (inbound vs outbound), remote port, and which local application or service was involved. Outbound blocks are more concerning than inbound probes.
  • Update your antivirus and run a full system scan, then run a second opinion scanner such as Malwarebytes. If you suspect a deeper infection, use an offline rescue scanner or bootable rescue media.
  • Look for active connections and which processes own them. On Windows, useful commands are:
netstat -ano | findstr ESTABLISHED
tasklist /FI "PID eq <pid>"
  • Secure the network device: reboot the router/modem, change the admin password, disable remote management and UPnP if not needed, and remove any unnecessary port-forwards. On Wi‑Fi use WPA2/WPA3 and a strong passphrase.

If ZoneAlarm marks some hits as “serious,” check whether those were inbound probes or blocked outgoing attempts. Persistent outbound attempts usually mean malware and should be isolated and cleaned. Blocking huge numbers of random IPs is generally futile because attackers rotate addresses; focus on removing any local compromise, keeping the OS and software patched, and maintaining up-to-date antivirus.

Further reading: Windows Firewall documentation and Malwarebytes.

Recommended Answers

All 2 Replies

Member Avatar for gerbil

Nothing... it's working. :)
Just think, if you didn have a firewall, were running XP with no updates.. some of those might have gotten thru.
I updated on 9th July, it has clocked 12,000 attempts. The web is loaded with systems which patrol constantly looking for unguarded, open ports.

Member Avatar for steven woodman

Ya, its a good thing you did install a firewall but if it does not include antivirus/spyware
you should get some and run a scan. one of them might have got through before installing you firewall.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.