• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Norton Security History - Malicious Log in Attempts and Suspicious Activity

For the past few days, Norton has been telling me that malicious log in attempts have been blocked.  This has happened maybe 12-15 times.  I checked the security history log and there are some other things that I am concerned about:

-Connected to a public network

-IP Address has disappeared 

-Protecting your connection to a newly connected network

-You allowed Skypeapp to access your network resources  (this happened yesterday and I haven't even used Skype in over a week and that was just to add someone)

My questions are:

1. Based on these types of activity, is my computer safe right now?

2. How can I get these intrusion attempts to stop?

Thank you!

Replies

Kudos1 Stats

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

1 Yes you are safe. Norton is doing its job and blocking unexpected attempts. The IP address disappearing will show in the log every time you shut down/sleep/hibernate your computer. When you restart you will see entries for the new connection being protected.

2  There is nothing you can do to stop someone trying to access your system over the internet, other than disconnecting from the internet. 

Things happen. Export/Backup your Norton Password Manager data.
Kudos2 Stats

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

All the things that you listed are just Norton logging the various network connections that it is monitoring.  These are all normal connections and disconnections that your PC makes to internal (localhost) and external (home network, internet).  There is nothing malicious going on.  Are the "malicious log-in attempts" you saw being reported as "Unauthorized Access Blocked" entries?  If so, that is just Norton Product Tamper Protection blocking other programs, and Windows itself, from accessing Norton files and processes.  That too is normal and not anything to worry about.  If you are seeing something other than that, can you please describe the alerts more fully?

Kudos0

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

The entries say:

Severity: Medium

Activity: An intrusion attempt by [IP address] was blocked. 

Status: Blocked

IPS Alert Name: Malicious Site: Malicious Domain Request 22

Attacking Computer: [IP Address]

It says it matches the network traffic of a known attack and tells me the file path where it originates from. They have come from four or five different IP addresses.  Today, they have increased in frequency.  Since midnight, there have been 32 attempts to get into my computer.

Thank you for any information you can provide and thank you for responding so far.

Kudos1 Stats

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

https://www.symantec.com/security_response/attacksignatures/detail.jsp?a...

Do these happen when you are visiting a particular website?  If so, then the site is probably compromised.  If these are happening randomly, then it is possible that a program on your PC may be trying to establish the connection.  I would scan with the free version of Malwarebytes to see if there may be a Potentially Unwanted Program that Norton is not detecting.

Kudos0

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

You were right. I ran Malwarebytes and had malware on my computer. Thank you for that tip!  I appreciate it.

Kudos0

Re: Norton Security History - Malicious Log in Attempts and Suspicious Activity

Hello KSM

Your question about Skype accessing your network resources was because Skype had an update yesterday I think it was. Skype auto - updates most of the time. Sometimes you do have to sign in again. A new version would have to access your network resources.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 270 I E 11 Chrome latest one