Need information

[CelticWinter]

Does anyone else ever get attacked by worms when they are in the DU? For the past few months my system has been warning me of attempted attacks everytime I come into the DU....I would say on the average of 6-8 attempts each time I come here. All I get is a bunch of numbers for the intruder, any information on this would be appreiated.
Thanks
Celtic

[hobbit709]

1. What antivirus are you using

I've never had that on DU. Maybe on some of the hacker sites I hit occasionally but not here.

[Berserker]

2. What are you using norton?

[CelticWinter]

3. yes im using norton n/t

[Berserker]

8. norton is

famous for their shock and awe. They shock the user into thinking the hack the planet group is after your pictures of last weekends visit to grandmas and then make the user of their program go awwwww after they pay for another year of so called protection.
You would be much better off installing free programs that do a much BETTER job of protection and surf in peace.
Or you can try this method......

[CelticWinter]

9. LMAO cute

I have used nortons for years and never had this happen,,,,,just thought it was odd.

[RoyGBiv]

4. Attacked by worms?

I first have to ask what leads you to believe you are being "attacked by worms"?

What are these attempts specifically, i.e. port, protocol, etc., are they outbound/inbound, and what is reporting these attempts to you? Do you have all your ports closed or preferably set to drop all unsolicited packets?

Have you run a virus scan recently?

I just grepped 3 months of firewall logs, and I got nothing incoming from any of DU's IP addresses that could be considered an attack of any sort. Most of what hits my firewall is basically background noise or random probes. Like hobbit, I occasionally hit a site that will read the IP address from my headers and start an attack on explicit ports, but none ever get through, and that's never happened with DU.

[CelticWinter]

5. My Norton internet worm protection box pops up

and says its detected and blocked an intrusion attempt.....when i look at it it says
Intrusion: with a name
Intruder: bunch of numbers
Risk level: high
Protocal: initials
Attacked: me
Attacked ports: name

[RoyGBiv]

6. Okay ...

Can you fill in the blanks. "Bunch of numbers," "initials," etc. doesn't tell us much.

Regardless, for whatever it is worth, Norton's tools are notoriously bad. That's not saying you don't have a problem, just that Norton isn't very good at detailing what the problem actually is and often fails to detect its true source.

[CelticWinter]

7. I PM'd u the info

[RoyGBiv]

10. Check your inbox ...

Regardless of anything I said there, I suspect very strongly this is a random script kiddie who has randomly pinged your IP and gotten a response and has added it to a random list of IPs that get attacked on a regular basis.

The exploit is real and nothing to take lightly. However, if your system is up-to-date and has a good firewall running, I wouldn't worry about it too awful much.

[CelticWinter]

11. Thank you for all your help

I will do what you said to do....and btw the intruder number isnt always the same...that is the one I caught earlier tonite...
Thanks again
Celtic