Help i have been attacked
 

Help
Over the past week my sygate firewall keeps sending a message that my ports are being scanned by
203-184-xx.xx
203-184-xx.xx
203-184-xx.xx
203-184-xx.xx
203-184-xx.xx
This has happened both while using Limewire and just browsing
Now i was using limewire when i got the message again then Limewire shut down then sygate shut down so i disconnected my dialup, shutdown and rebooted in safe mode. I then scanned with AVG but the system crashed and it said i have to reinstall windows. Now i have lost all my downloads.
Help
What can i do
Mike
PS
Using another computer to send this

See Organisations trying to connect via Port 6346

Reminds me of a similar post in this section just a week or so ago.

Hi
I have just run again in safe mode, ran AVG and note that it is crashing at
C:\WINDOWS\JAVA\Pack......\ExceptionInInitializerE rror.class
What does this mean and can i remove it and try again
Ta
Mike

Sure, use your Add/Remove Prog Control panel to remove Java. Then download Java & SAVE it to your computer (don't install it over the net.) Then re-install it. Perhaps you can see: Fixes for Limewire

Thanx for your replies.
The computer i am now using is actually the same computer but on a separate partition (using partition magic)
This partition has also been scanned so i have spent some time on sygate. I did a back trace and see IP address 202-180-80-68 etc so maybe block this aswell however i havnt learned as yet how to block in sysgate.
On back trace i clicked who is it but it came back that it could not identify them

There's a 'new' way noted to send users useless results. Looks like an attempt to disrupt file-sharing.

Follow the thread at http://groups.yahoo.com/group/the_gdf/message/21705

(Looks like the easy workaround is to scroll down the results list --don't download the from the early "popular" files)

I have just been studying my sysgate trying to learn as much as i can.
I see in my trafic log that 203-184-xxx was allowed and spent 6 mins access time.
How did they get "alowed" and how do i block them?
Ta
Mike

Firewalls & Additional Protection
 

Mike

I don't use Sygate myself so I can't advise you on it but I do use Norton Personal Firewall 2003 and I have found that firewalls are complex beasts. To get the best from them you first must read the manual, downloadable from the manufacturers web site, and, if required, check out a forum that deals with firewalls, like CastleCops (formerly Computer Cops):

http://castlecops.com/forum2.html

The one piece of advice I can give is to install PeerGuardian 2 (beta 5) on your PC. PeerGuardian stops a range of 848,778,337 IPs, updated daily, from accessing your PC. With PeerGuardian and a properly configured firewall your PC should be safe.



UK Bob

i just caught the spy
 

I am still beeing scanned so i turned on the internet and waited. I only waited a minute and there at it again so i quickly did a back trace and it is
OrgName: Level 3 Communications
OrgID: LVLT
Address: 1025 Eldorado Blvd
City: Broomfield
Postal Code: 80021
Country: US
What do i do now?

If you can capture the IP Address and or URL then put this into your Sygate Firewall block list.

Then you will have no more problem.



UK Bob