Re: Intrusion Attack

james wrote:
> Hello All,
> I am a regular internet user but since few days my Norton 2005
> Antivirus shown me following messege......
>
> Details: Attempted Intrusion "MS ASN1 Integer Overflow TCP" against
> your machine was detected and blocked.
> Intruder: 10.19.114.206(2801).
> Risk Level: High.
> Protocol: TCP.
> Attacked IP: BLITZKREIG(10.19.114.147).
> Attacked Port: 139
>
> I got nowadays several messeges like this but Intruder IP is different,
> so could anybody please tell me how can I permanently block these IPs
> and how can I search them they might be from my neighbourhood.
> Is there any harm even if Norton Blocks them.....
>
> Thanks
> James
>

Check this Attacker 10.19.114.206 Victim 10.19.114.147. You both are on
same network or Attacker has spoofed IP.
Are you in LAN? If you are it is somebody you know. Maybe he is sitting
next to you, and he is laughing while you read this.
If you have Wireless router, reconfigure WLAN protection, turn DHCP off,
you have a guest. Probably neighbour.
Answer to Don Kellowey, then maybe somebody will answer you what is
happening.
Received on Mon May 1 01:07:02 2006