wondering

Discussion in 'other firewalls' started by InsaneJester, Oct 10, 2003.

Thread Status:
Not open for further replies.
  1. InsaneJester

    InsaneJester Registered Member

    Joined:
    Apr 28, 2003
    Posts:
    27
    Anyone have any idea what thios is all about

    10/2/2003 1:52:12 PM    Your computer has been attacked from 204.252.125.130. Attack - Helkern. The attack has been successfully repulsed.
    10/2/2003 2:14:36 PM    Your computer has been attacked from 195.166.237.32. Attack - Helkern. The attack has been successfully repulsed.

    goes on & on and wall is stoping it aparently but thats the only attack i ever seem to get was just wondering if maybe im infected with a worm thats trying to connect or what
     
  2. BlitzenZeus

    BlitzenZeus Security Expert

    Joined:
    Feb 11, 2002
    Posts:
    451
    Location:
    Oregon, USA
    Its likely just some probes that your firewall is blocking. Your logs don't give any useful information like what the source, and destination ports were. It also doesn't list if a program was listening on the port, or not so it hard to make a real conclusion.

    Also many firewalls use the term 'attack' for things as simple as probes, or scans to make them seem like they blocking more than just a simple probe. What firewall are you using?
     
  3. InsaneJester

    InsaneJester Registered Member

    Joined:
    Apr 28, 2003
    Posts:
    27
    yea well i get that one all damn day and only that one every day
    im using kaspersky
    was using kerio but still get that buffer overflow crap that they said they fixed :/
     
  4. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi InsaneJester

    Do your Kaspersky logs give any more detail as to protocol, source port and destination port along with IP's?

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.