Hello,
Every single day for about the past week or two I get the following notification from my Norton installation.
"An Intrusion attempt by 193.32.162.190 was blocked"
It will happen with a given IP# until I add it to a list of blocked IP#s, then it will start happening with a different IP#, so far it has happened under four different IP addresses. They all have the same details if I click on more info.
There it says Attack: Zyxel Command Injection CVE-2023-28771. Under default action and action taken it says no action required.
Along with the attacking computer IP it also gives the number 33775 and then under traffic description it says UDP, Port 33775.
Then it says the IP in question matches a signature of a known attack. And it says the attach resulted from \device\hardiskvolume4\windows\system32\svchost.exe
I'm not sure if that is on the attacking computer or mine. I don't have 4 hard disks and none are named that way so my guess is this is on the attacking computer.
Does anyone know anything about this sort of thing and what can I do to prevent it from continuing to occur. I can keep adding IP addresses to the blocked list indefinitely, but it bothers me that this is a consistently occuring issue. Am I being actively targeted by someone or what?
Thanks,
Skeeter