cmc

Distinguished
Oct 31, 2009
6
0
18,510
Here's the story:
I use Norton Internet Security, and a few days ago it notified me it had blocked an intrusion from IP 192.168.1.1, 53 and that "The attack was resulted from System"
I'm not too hot on my knowledge of IP's etc, so I gave it a quick google. It comes up with a bunch of stuff which I don't really understand.

Would really appreciate if this could be explained to me in simple terms, is it dangerous, is it something routine, is it Norton Internet Security being a douche, is it someone try to hack me over the wireless network I use or what?

Thanks.
 

sk1939

Distinguished
May 2, 2010
6
0
18,520
Hmm, well give that the local address given is usually either your router or modem, it seems like someone tryed to ping you to see what was open and accessible, what the military and IT people call a probe. The most likely thing would be someone tried to ping you.

In this case, port 53 is used for DNS, which is basically a translation thing that changes 72.14.204.104 into Google.com. In all likihood it's harmless, it means someone/thing (most likely your modem/router) was trying to change your IP (192.168.1.3) into "Bobs Computer" (whatever your comptuer is named). Norton blocks it as a precaution because other things can happen on that port, but I wouldn't worry about it.
 

cmc

Distinguished
Oct 31, 2009
6
0
18,510
I've suspected for a while that my step dad (who manages all the computer stuff at our house - networks, wireless, router etc) is monitoring my internet activity in some way. Could this be something to do with that?
I'm on a laptop and use the home wireless network.

Thanks
 

sk1939

Distinguished
May 2, 2010
6
0
18,520


Possible, but not likely, as unless he had software that costs tens of thousands of dollars, he'd have to have somthing installed on your computer anyways, which would bypass Norton to begin with.