Hi all. Let me preface that I will be upgrading to NIS 2010, waiting for my refund from the Gov so I can purchase it
Also, not looking for monsters again, just trying to understand something that has puzzled me for a LONG time.
I Also understand that I'm using an older product and there may not be many who can help me with this.
Let me give some specs
Windows Vista 32bit home premium with vista service pack 2
HP desk top using Norton AV 2008 protection with on demand free version of malwarebytes, spybot S&D, and windows defender
Now I know that 192.168.0.1 is the number that is assigned to my DSL modem. Anyway the issue I have involves entries in my firewall log that show
Unused port blocking has allowed 192.168.0.1 (8)
this logs every 5 minutes or so
Now my firewall does show other IP addresses that are blocked for one reason or another, so I know the firewall is working
Two things throw me/have questions about:
1. Why is (8) at the end of 192.168.0.1?
Does the (8) at the end of 192.168.0.1 mean that it is connecting to my machine on port 8? My DSL modem is a Siemans speed stream 4100, so could it just be that the DSL Modem is randomly assigned to the port 8?
2. why does the entry show every 5 minutes in my firewall activity log?
In some ways it makes sense that the logging is just showing that my DSL modem is connecting to my machine (as I'm on DSL my computer is connected to the internet everytime its turned on). And for some reason the logging refreshes itself every 5 minutes?
Now let me also point out that my security logs also note any outbound connections from my computer and there are no outbounds that strictly coincide with every inbound firewall entry of 192.168.0.1
I have also checked my "network" set up and it just shows 1 pc, mine (checked this both throw Vista control and my Norton network security configuration) So there are no other computers connected to mine.
I ran netstat -a, netstat -b, and netstat -ano and none of them indicate anything for port 8
Also all scans, only show tracking cookie, no spyware, virus, etc.
so if anyone can help me make sense of this, I'd be greatly appreciative.
THANKS
Oh and something that raised some concern for me. I had posted this issue on yahoo answers, and someone indicated that it sounded like a denial of service attack. Not sure what that means, but I'm able to access all websites that I try to connect to.