hello,
I regulièrement have an alarm of attempt at intrusion on e-Mail Scanner Service it is a true attempt at update of the service or an attempt at hacking?
message from kerio firewall:
“Someone from 194.67.188.6, port 2216
wants to connect to port 25
owned by ‘avast! e-Mail Scanner Service’ on your computer”
It isn’t an update attempt because to update Avast you connect to the Alwil servers not the other way round. It’s not a hack either possibly just a port scanner looking for unprotected systems to compromise.
Blocked incomming traffic by a firewall can have a lot of causes like:
hacker/cracker
infected system that tries to spread a worm/virus
someone who is trying to connect through ftp
someone who is trying to connect through p2p
etc etc etc.