Printable View
i dont know if this happens to anyone else but surprising in the last 24 hours i have had about 40 'critical' attempts on my pc according to sygate; intrusion detected and active response. i mean i have never had this before so many times. before it was a few times in a week. should i be scared about this and make evasive manoeuvres or just sit down and wait until im conquered by the enemy. :o
I'm getting a lot of minor attacks lately.
scottwile, here on the forums get's a critical attack every 15 seconds consistantly :lol:Quote:
Originally posted by the mask@15 March 2004 - 01:27
i dont know if this happens to anyone else but surprising in the last 24 hours i have had about 40 'critical' attempts on my pc according to sygate; intrusion detected and active response. i mean i have never had this before so many times. before it was a few times in a week. should i be scared about this and make evasive manoeuvres or just sit down and wait until im conquered by the enemy. :o
he has just over 4000 critical attacks, in his security log (1 day) :rolleyes:
Wow 4000 attacks.
a lot of ppl, misunderstand what a lot of these attacks are
some can be auto upload software trying to check its version, some can be just normal router traffic and isp connection traffic
if you have a few programs installed with atuo update features you should get quite a few knocks on the door
norton a/v will check its software at least everyday if not more, as well as windows updater
its more important to recognise numerous attacks from one source, as this will eithr be a deliberate attack ( hack ), dos ( denial of service ) attack or a trojan, and thats what you need to defend yourself against
even that annoying windows messenger service popup window that come up is seen as an attack, but its just spam
I get port scan attack every x min. Like delphin460 mentioned, not all of these attacks are real attacks, like someone trying to scan for proxies could be seen as port scanner.
Use Sygate's Advanced Options to block the IP. Ensure you backtrace the IP and run a whois to make sure it's not something you're running yourself.
I did, but the IP is changing (changes everytime you open/close internet). I can't block the first blocks of the ip, because the person is from my ISP. Backtracing showed no resluts, since he/she scans and turns off computer. changing ips are not included in the whois db.