Tak tohle už vypadá asi krutě
červený ALERT.
ZoneAlarm blocked access to port 139 on your computer
No breach in your security has occurred. Your computer is safe.
What happened?
ZoneAlarm prevented a remote computer from connecting to port 139 on your computer. If you are sharing files on a local network, this connection attempt was probably legitimate network traffic. Port 139 is commonly used by networked Windows computers to enable file sharing and other resource sharing. However, if the traffic that generated this alert came from the Internet rather than a local network, this may have been attack on your computer
Should I be concerned?
No. ZoneAlarm blocked the connection attempt, so no harm can come to your computer from it. However, blocking traffic on this port can keep you from sharing files and other resources with other computers on your local network. Also, Windows file sharing can represent a security vulnerability if you do not password-protect your shared files.
What should I do?
Click OK to close the alert box. This does not let any traffic into or out of your computer.
If you are sharing files on a local network, password-protect your shared files to keep them secure. See Windows help for instructions on how to do this.
If you are on a home or business local network, and you are receiving repeated alerts on port 139, do the following:
1. Make sure the ZoneAlarm Internet Lock and Stop button are not engaged.
2. Make sure the local computers you want to share files with, or your entire local network, have been added to the Trusted Zone.
3. If the above steps do not reduce the number of alerts, use the ZoneAlarm Alerts and Logs panel to suppress the alert box.
See ZoneAlarm online help for instructions on how to perform these steps.
ZoneAlarm blocked access to port 139 on your computer
No breach in your security has occurred. Your computer is safe.
Inside the firewall alert
Alert property Alert property value Technical explanation
Source IP Address 10.5.6.42 The IP address of the computer that sent the packet which caused the alert.
Source Port 1174 The port used by the source computer when sending the packet.
Destination IP 10.5.6.xxx The IP address of the computer to which the packet was sent.
Destination Port 139 The port on the destination computer used to receive the packet.
TCP Flags SYN Flag indicating the start of an Internet or network connection.
Transport Layer Protocol TCP The protocol that allows data to be transported between software programs on different computers.
Network Layer Protocol IP The protocol that allows two networked computers to locate each other on a network.
Link Layer Protocol Ethernet The protocol that allows two directly linked computers to share a network cable.
Alert Date Jul-11-2005 05:06:21 AM PDT The time when ZoneAlarm detected the alert on your computer.
Alert Count 1 Number of times this connection attempt repeated its attempt on your machine after the original alert. ZoneAlarm shields your machine from repeated displays of an identical alert.
ZoneAlarm security enforcement at time of alert
Lock Level Lock Not Engaged Internet and network connections permitted by your ZoneAlarm settings are not blocked by a lock setting.
Trusted Zone Security Level Medium This ZoneAlarm setting enforces application privileges and Internet Lock settings, leaving your computer visible to other computers in the Trusted Zone. It does not block file or printer shares (NetBIOS) or operating system traffic to and from the Trusted Zone.
Trusted Zone Servers Servers Allowed Computers in your ZoneAlarm Trusted Zone are not prevented from connecting to server programs running on your computer.
Internet Zone Security Level High This ZoneAlarm setting blocks access from the Internet Zone to file and printer shares (NetBIOS) and other operating system services. Ports not currently in use by a program are blocked and are not visible to the Internet Zone. This Security Level also enforces application privileges and Internet Lock settings.
Internet Zone Servers Servers Allowed Computers in your ZoneAlarm Internet Zone are not prevented from connecting to server programs running on your computer.
Packet Direction Incoming The packet that caused the alert was sent from a computer located somewhere on the Internet or on your network. It was being sent to your computer.
Zone Internet Zone This ZoneAlarm zone contains all the computers and networks in the world that are connected to the Internet, until you explicitly define them as members of another zone.
Operating system Windows XP-5.1.2600-Service Pack 2-SP
ZoneAlarm blocked access to port 139 on your computer
No breach in your security has occurred. Your computer is safe.
Details
Port 139 is commonly used for NetBIOS messages (Network Basic Input-Output System). Windows uses NetBIOS to manage network traffic, and particularly to enable you to share files, printers, and other resources with other computers on your home or business network. If 10.5.6.42, the address the blocked connection attempt came from, is on your local network, this alert may have been caused by:
* A server on your network attempting to renew your IP address
* Another Windows computer on your network attempting to refresh information about your shared directories
* Another Windows computer responding to an attempt by you to access shared resources
If 10.5.6.42 is not on your local network, this alert may have been caused by a port scan.
About Port Scans
Port scanning means using an automated tool to systematically try to connect to every port on a computer. While port scans have some legitimate uses, hackers use them to look for unprotected computers with unguarded ports, typically scanning random blocks of Internet addresses.
Successful port scans can retrieve a variety of information about a computer, such as its operating system and the programs it is running. Because you are using ZoneAlarm, your computer remains invisible to port scans. Hackers performing scans do not even know your computer exists, because no information is returned by the scan.
daj si tu ip do trusted zony...inac imho je lepsi kerio, ten je aj po cesky, rozumel by si aj co sa pyta 
Takové zaznamy mám ve FW často.