Just got this alert from my computer.

[Zoltar]

The firewall has blocked Internet access to 141.154.112.118 (TCP Port 8888) from your computer.

I haven't installed anything lately. I looked in msconfig, win.ini. Nothing odd loading.

WTF?

Don't think it's a Trojan.

 

[tomcat]

are you on a university connection, or at work, or an otherwise non end-user connection

 

[Zoltar]

Home, cable

 

[Harvey]

Zoltar -- It sounds like you're running Zone Alarm or another software firewall. If it's Zone Alarm, congratulations on picking one of the best pieces of freeware on the net.

Do you have an icon in you sys tray that looks like a bunch of red vertical stripes on top of a bunch of green ones? If so, click it to bring up the program, and click on the left tab (Alerts). Then, go to the bottom for "Alert settings," and you can select whether an alert will pop up each time someone tries to access your machine or whether you want it logged in a text file.

If you want to know who's been knocking at your door, go to Arin/Whois, and enter the IP address in the window. It will tell you who owns it.

 

[Pretender]

knowing what program tried to gain access would help, your firewall should tell you, and when it does, let us know so we can help ya.

 

[Hamburgerpimp]

This is all I could find with Neotrace:

bellatlantic.net
Query: bellatlantic.net
Server: whois.networksolutions.com
Registrant:
Bell Atlantic Internet Solutions (BELLATLANTIC2-DOM)
1880 Campus Commons Drive
Reston, VA 20191-1512 US

Domain Name: BELLATLANTIC.NET

Administrative Contact, Technical Contact, Billing Contact:
BAIS DNS Administration (BD1353-ORG) dnsadmin@BELLATLANTIC.NET
BAIS
1880 Campus Commons Drive
Reston, VA 20191
US
(703) 295-4155 Fax- - (703) 295-4409

Record last updated on 13-Nov-2000.
Record expires on 29-Jun-2000.
Record created on 28-Jun-1996.
Database last updated on 13-Dec-2000 20:17:11 EST.

Domain servers in listed order:

WORLD1.BAWAVE.COM 199.45.32.37
WORLD2.BELLATLANTIC.NET 151.196.0.37
WORLD3.BELLATLANTIC.NET 151.199.0.37
WORLD4.BELLATLANTIC.NET 151.197.0.37
WORLD5.BELLATLANTIC.NET 151.198.0.37




141.154.112.118
Query: 141.154.112.118
Server: whois.apnic.net
% Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html

% No entries found. For help, try "whois -h whois.apnic.net help". If you
% are trying to look up an AS number, make sure you specify AS#### instead of
% just ####.
%
% Note: APNIC contains _ONLY_ IP and AS allocations and associated contact
% information. APNIC does _NOT_ allocate domain names, thus is not responsible
% for domain name information. For domain name delegation information, please
% contact the top level domain name administrator of the domain in question.
%
% Refer to:
% http://www.apnic.net/db/RIRs.html for other sources of Authoritative data
% http://www.apnic.net/maps/ for links to Domain Name registries.

 

[Zoltar]

Harvey, and other guys,

This was odd being an outgoing request. Look at the wording:

The firewall has blocked Internet access to 141.154.112.118 (TCP Port 8888) from your computer.

My computers is going out.

I do not even have realplayer in my tray, but that gave a request as well. (Separate incident just an FYI.)

What's bugging me is that no app was identified, and that IP would be some joker with DSL.

Hasn't done it again....yet.

 

[waytoomuchcoffee]

Looking through port lists, 8888 is used by the Ultima patch server. Could be used for other things too though.