Welcome, Guest. Please login or register.
November 23, 2009, 02:35:34 AM

Login with username, password and session length

336980 Posts
37292 Topics
84548 Members

Latest Member: surfacefei

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Help - CIS
| | | |-+  Firewall Help
| | | | |-+  Intrusion alert:3000+
« previous next »
Pages: [1] Go Down Print
Author Topic: Intrusion alert:3000+  (Read 493 times)
Michael Withstand
Comodo's Hero
*****
Online Online

Posts: 258


Please read my sig. Thank you.


« on: December 02, 2008, 12:47:07 PM »

I've been ignoring my intrusion alert numbers even though it showed 3000+ sometimes until today that I caught a person changing my yahoo messenger status with his intrusion which the CIS detected but I stupidly allowed.

I traced his IP and found that his ISP is the same with mine.

My question is why do I have 3000+ intrusion attempts logged? well mostly by 2-5 different Ip addresses. One is particularly persistent.

Do I have to worry about these intrusion attempts? Wat can I do to protect my PC better and how can I know if somebody got into my PC?

Thanks
Logged

I'm a victim of severe persecution and harassment from people in power in Singapore. They defamed me as being mentally ill. Refusing any medication I've proceeded to finish a 7 semester degree from local(INA)U. They think their use of remote viewer is a perfect excuse that no such capability exist.
exproff
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 333


Programist + Sys. admin. (NOT COMODO employee)


« Reply #1 on: December 02, 2008, 12:55:53 PM »

1) The number of event in Log depends on 2 conditions: number of Rules "Block AND LOG" and number of intrusions.

2) You shouldn't worry about logged intrusions. If they in Log - then they were blocked =)

3) About IP from same ISP - If they virused, then it is logicaly that nearest IP range for distributing - same IP range of ISP

4) First of all - try to apply Rules for blocking ECHO requests.

5) If you REALLY want to get your life more safe - save you Logs and call to your ISP. Describe situation with permanent intruder and tell ISP that you have enough Logs to prove it. ISP wants to have a good reputation, so it could help you.
Logged
Michael Withstand
Comodo's Hero
*****
Online Online

Posts: 258


Please read my sig. Thank you.


« Reply #2 on: December 02, 2008, 04:11:48 PM »

Hmm how do I set to block echo request? I've stealthed all my ports with CIS.
Logged

I'm a victim of severe persecution and harassment from people in power in Singapore. They defamed me as being mentally ill. Refusing any medication I've proceeded to finish a 7 semester degree from local(INA)U. They think their use of remote viewer is a perfect excuse that no such capability exist.
Michael Withstand
Comodo's Hero
*****
Online Online

Posts: 258


Please read my sig. Thank you.


« Reply #3 on: December 02, 2008, 04:43:05 PM »

Never mind I got it expproff. Thanks tests at grc.com showed all my ports didn't respond to ping request. thanks
Logged

I'm a victim of severe persecution and harassment from people in power in Singapore. They defamed me as being mentally ill. Refusing any medication I've proceeded to finish a 7 semester degree from local(INA)U. They think their use of remote viewer is a perfect excuse that no such capability exist.
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.038 seconds with 19 queries.
Powered by SMF 1.1.10 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com