Constant intrusion blocking of the same IP.

[Kage_]

Norton keeps notifying me of a blocked port scan on my computer, the IP of the suspect attacker is "192.168.1.1, 53"

What could this be and how can I stop this?


Thanks.

[srsinternets]

Curious, are you on a wireless network and is it secured?

[Kage_]

I'm using a Netgear wireless router.

[MrTroy]

Well, port 53 is generally used for DNS, and I would venture to guess that 192.168.1.1 is your Wireless Netgear router. So Norton is saying it is blocking the IP (your router) on port 53, from scanning the ports on your PC. This could be an attack of some sort (someone from the outside trying to initiate a port scan) or it could be something that your Netgear router is doing that Norton does not like.

Is your wireless network encrypted (password protected), and did you change the default administrator password on the Netgear box?

[Kage_]

I'm pretty sure I'm still using the default password and yes, my router is security encrypted.

[ephekt]

I'm pretty sure I'm still using the default password and yes.

Why? Fix this asap.


This is probably just Norton being stupid, although I'd like to see a .cap of the traffic. Securing your wireless should be enough for a residential block though.