I've been experiencing the same with Internet Security 2004, hence my search for this post.
The 2003 version did not do this, so I don't think it's really a serious security threat.
But it pops up every few seconds and is really disruptive.
The so-called attacks have often been aimed at port 1026, but other ports have shown up too.
Can anyone throw some light on the cause, or describe how this particular feature can be safely turned off?
I've disabled the Intrusion Detection Alerts, but without success.