Thanks swh, NAV just blocked more internet worms.
Security rule Trans Scout from:
Remote address 82.53.182.241, port 1949
Remote address 66.68.215.232, port 1636
Remote address 203.131.139.86, port 1238
What is going on? I have not seen these alerts before, am I the unfortunate target or are these symptoms of a much wider attack?