in the past; I have had severe intrusion issues. Previously before moving to Linux, my internet was being throttled and browsers were being tampered with. So, I moved to Linux. I used arp -a to view CACHE logs of connected devices and found 4 attackers. I then tweaked the UFW settings to deny all & default to deny all incoming, but then opted towards reject all...afterwords, I installed tripwire & fail2ban, set the jail config to ban 5 failed request attempts for over 1000 thousand days; and an additional waiting period of over 1000 thousand days. I then used arp -a and ip addr/ip addr show and revealed that there were 0 connected IP's other than my own. So it looks like on that end, it had been a success. But there was still a problem --- my browser tabs were still being killed & browsers being tampered periodically, I determined that the internet throttling was in relation to the browsers directly, as after my internet throttles, I get a prompt that (x) browser is having issues [terminate/wait]....so, I stripped all browser downloads & installed 4 browsers - brave, firefox (pre-installed), chrome, tor. I then configured the browsers with these pre-sets/extensions here and here. That fixed the browser tabs from being killed, but not the throttling. So, I installed EtherApe and snort. I discovered that a massive amount of internet traffic was going through internet UNTIL I enabled my VPN...after I enabled my VPN, there were certain nodes that appeared periodically seemingly to receive packets, but...I just now experienced the throttling/browser failure WHILE there were no additional nodes present. No traffic was going through my network on EtherApe's end. I did receive 1 warning for potentially bad traffic on snort, but i'm not entirely sure if this was in relation to the exact event time, since I saw no other nodes present. I even installed suricata and have it running.
But the browser failure/throttling still happens. I have memory saver for tabs enabled on each browser as well. It doesn't just happen randomly. The browser's turn into lagged state and freeze my PC ONLY when I go to make specific posts or do specific things, after having used the browsers/internet just fine for several hours before the event....It doesn't appear to be a matter of switching between tabs fast, and follows a pattern of causation that shows an attacker is remotely viewing the activity in some mannerism, despite the fact that I have Remote Desktop disabled on Ubuntu settings AND have incoming ports set for reject all...does anyone have any clue on how to remediate this issue?