Comcast Cable Users: How often do you get hack attempts?

[Fulcrum]

I've had my Comcast Cable service for a few months now, and I've noticed that my firewall software (Norton) blocks an attempted attack via trojan horse about every 2-3 days or so. Almost always the ip is another comcast address, which makes sense I suppose. What I do find odd though, is that the only trojan horse (out of maybe 20 or so attempts) ever reported by my firewall software is the Backdoor/Subseven trojan horse. Every single time, it's that trojan horse. For those of you who also use Comcast: How often do get attacked/probed and what is the program you most frequently get attacked with? I'm curious as to how many other Comcast users get the Backdoor/Subseven all the time. At first, I always reported the attack to Comcast Abuse dept. but I'm sure they rarely, if ever, investigate it like they say will in the reply message they always send. Now I report it every few times, just in case it helps.

 

[SWirth86]

I've had Comcast Cable for about a year now....no hacking attempts to my knowledge. We used to run just one computer, but then I got another one, so we bought a router, that also had a firewall built in. I dont run any software to prevent hacking though. Why are so many people triyng to get into your system?

 

[Fulcrum]

Beats me. Anyone else have a reply?

 

[Platypus]

Um.. are you sure it's a trojan horse and not comcast pinging you? ...

Paste your output here.

 

[iamwiz82]

you arent being attacked. When a person who is running sub7 doesnt know who has it and who doesnt, so he/she must scan a block of IPs to find out.

 

[F117NightHawk]

I've had my Comcast since Feb. When I had my ZoneAlarm, it was showing a hacking attempt every 2 minutes or so. I don't know if it was trojans but there was something going on. And yes the address was usually another Comcast.

 

[Platypus]

Ok people are not out to "hack" tiny broadband user accounts. It could be, but it's very highly unlikely. By hack attempts, what do you mean, paste the output from your logs.

 

[Fulcrum]

I probaly should have used the term scan rather than hack or attack. I know there is no conspiracy to hack my computer out there. I'm just curios how many other users get scanned constantly like I do.

Here is an example log file from my firewall software:

Date: 8/4/2002 Time: 23:51:36
Rule "Default Block Backdoor/SubSeven Trojan horse" blocked (68.61.249.64,27374). Details:
Inbound TCP connection
Local address,service is (68.61.249.64,27374)
Remote address,service is (68.39.117.173,4305)
Process name is "N/A"

 

[Fulcrum]

Anyone else?