- Joined
- Jul 24, 2002
- Location
- Seattle, WA
I've had four attacks from the same IP address in the last couple hours - some connection from Austria, according to Norton Firewall. Is there anything I should do, or is this pretty normal?
-
Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!
Multiple Attacks - What should I do?
- Thread starter johan851
- Start date
- Joined
- Oct 13, 2003
- Location
- Rockville, MD & Athens, Greece
can norton firewall block IPs?
OP
- Joined
- Jul 24, 2002
- Location
- Seattle, WA
- Thread Starter
- #4
Whenever someone attacks I think Norton blocks that IP range for 30 minutes. The weird thing is - the IP is changing, but the location and ISP stay the same.
- Joined
- Feb 15, 2003
- Location
- College Park, MD
He is probably on dial-up and disconnects and then reconnects and everytime he does he gets a new IP.
OP
- Joined
- Jul 24, 2002
- Location
- Seattle, WA
- Thread Starter
- #6
Hmmm...so it's not a problem to just ignore it?
- Joined
- Feb 15, 2003
- Location
- College Park, MD
I assume it would be fine to just ignore it, it might not even be an attack; I have heard that Norton Firewall has lots of false alarms. If you computer does end up acting strange then you should run a virus scan.
OP
- Joined
- Jul 24, 2002
- Location
- Seattle, WA
- Thread Starter
- #8
Alright, I wouldn't be surprised if Norton does like to make up stuff...just to make you feel more secure. 
I'll just ignore it then, and keep everything up to date. Thanks!
I'll just ignore it then, and keep everything up to date. Thanks!
- Joined
- Dec 15, 2003
- Location
- Northern Ireland
might it just be someone ip scanning? keep ur firewall updated and runing just in case!
- Joined
- Jan 26, 2001
I don't use Norton Firewall...I like Sygate Personal Firewall as I can block addresses very easily by adding advanced controls.
You CAN block in Norton...but it has been a year since I used Norton Firewall. I would block his address...but are you sure it is something coming in and not going out? A worm would go OUT and check different IPs like this
You CAN block in Norton...but it has been a year since I used Norton Firewall. I would block his address...but are you sure it is something coming in and not going out? A worm would go OUT and check different IPs like this
- Joined
- Aug 25, 2001
- Location
- Ontario, Canada
With software firewalls, "Attacks" is a very silly word. An "attack" according to most software firewalls, can be considered something as little as a ping, or other, normal traffic.
If you are getting the messages, that means that the firewall did it's job.
Every time I see one of those, I think: "Yay! Look at me, I did my job! Pat yourself on the back, I was worth the money! I stopped vicious people on the internet from hacking your computer!"
There's generally nothing to worry about. What you have to worry about is the stuff that you don't get messages for. If you still want to feel safe, block their entire subnet for a day or two.
If you are getting the messages, that means that the firewall did it's job.
Every time I see one of those, I think: "Yay! Look at me, I did my job! Pat yourself on the back, I was worth the money! I stopped vicious people on the internet from hacking your computer!"
There's generally nothing to worry about. What you have to worry about is the stuff that you don't get messages for. If you still want to feel safe, block their entire subnet for a day or two.
OP
- Joined
- Jul 24, 2002
- Location
- Seattle, WA
- Thread Starter
- #13
Yeah, that's the impression I got. I didn't have any problems when I didn't run a firewall. Now that I do, I get a couple alerts every day. Part of me says "Wow, I wonder how bad it was without a firewall!
"The other part tells me that I'm falling for a little bit of clever marketing.
