Over the past half hour, Norton has notified me that it has blocked several intrusion attempts from a “malicious DNS domain.” It identified the name of the attacking server as a fairly obscure Hindi word which I have used in various places online, but have not used recently. The likelihood of that being a coincidence is essentially nil. Also, the IP address the attack originated from was identical to my own IP address, the destination of the attack, except for the last digit 2, where the last digit of my IP address is 1.
WTF is going on here? Has an attacker taken data from my computer to mimic it, to disguise itself?
It is another computer or device in your network that tries to establish a connection with your computer. The Hindi word is probably the computer name (NETBIOS name) of the other computer.
Why is it a false alarm?
Why would another computer be named after an obscure word that only I have ever used?
Why would the IP address differ from mine by only 1?
IP addresses are local to your LAN and are handed out by your router in sequence. It’s typical that the .1 address is used by the router, how do you know that’s your computer?
What other devices do you have on the network? Phone, tablet, laptop? Go to Control Panel, System. What is the name of your desktop?
That’s why I was speculating that the attacker was masking itself with data stolen from me. Otherwise, how could I be attacking myself? There are 2 computers here sharing a wireless connection.
OK, that’s a relief. Thinking back, I remembered that the Hindi word is the name I assigned this computer when I first got it several years ago. I didn’t know that Norton could be fooled that way, like getting scared of your own reflection. Thanks!
In my opinion I wouldn’t waste your money on Norton, They have to justify their cost by giving you plenty of alarms to worry about. I use the free version of Avast (anti virus) plus the free version of Zone alarm (firewall) and it works real fine.