wondering

[InsaneJester]

Anyone have any idea what thios is all about

10/2/2003 1:52:12 PM ***Your computer has been attacked from 204.252.125.130. Attack - Helkern. The attack has been successfully repulsed.
10/2/2003 2:14:36 PM ***Your computer has been attacked from 195.166.237.32. Attack - Helkern. The attack has been successfully repulsed.

goes on & on and wall is stoping it aparently but thats the only attack i ever seem to get was just wondering if maybe im infected with a worm thats trying to connect or what

[BlitzenZeus]

Its likely just some probes that your firewall is blocking. Your logs don't give any useful information like what the source, and destination ports were. It also doesn't list if a program was listening on the port, or not so it hard to make a real conclusion.

Also many firewalls use the term 'attack' for things as simple as probes, or scans to make them seem like they blocking more than just a simple probe. What firewall are you using?

[InsaneJester]

yea well i get that one all damn day and only that one every day
im using kaspersky
was using kerio but still get that buffer overflow crap that they said they fixed :/

[CrazyM]

Hi InsaneJester

Do your Kaspersky logs give any more detail as to protocol, source port and destination port along with IP's?

Regards,

CrazyM