Home / Other / Other / computer to computer attacks
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] - (Bottom) Print
Author Topic: computer to computer attacks  (Read 478 times)
unklefunky
Guest
« on: May 17, 2005, 10:21:34 PM »

Recently my computer has been attacked at least 10-15 times daily.  I checked the IP address for the attacker and found that it's my ISP's home office.

Why would this be happening?

(66.214.174.214) This is the IP address for the attacker.  

Does anyone have any suggestions as to how I can fix this issue?  I've contacted my ISP and they say they know nothing.
IP logged
dl65
R.I.P.
Prodigy



Thanked: 18
Posts: 7,029


« Reply #1 on: May 17, 2005, 11:41:38 PM »

unklefunky......Could you explain what you mean by attacked 10 to 15 times a day .
Are you sure thats the correct url ......when I search it this is what I come up with .....

TraceRoute to 66.214.174.214 [66-214-174-214.mpk-eres.charterpipeline.net]

Hop (ms) (ms) (ms)  IP Address Host name
1 1 0 0  66.98.244.1 gphou-66-98-244-1.ev1.net
2 3 0 0  66.98.241.4 gphou-66-98-241-4.ev1.net
3 3 0 0  66.98.240.6 gphou-66-98-240-6.ev1.net
4 4 1 3  129.250.10.229 ge-2-1-0.r02.hstntx01.us.bb.verio.net
5 13 10 10  129.250.5.100 p16-0-3-0.r21.dllstx09.us.bb.verio.net
6 9 9 9  129.250.3.29 p16-2-0-0.r00.dllstx09.us.bb.verio.net
7 9 8 9  129.250.9.82 p4-0.qwest.dllstx09.us.bb.verio.net
8 9 9 9  205.171.25.45 dal-core-01.inet.qwest.net
9 42 42 42  205.171.13.6 bur-core-03.inet.qwest.net
10 42 42 42  205.171.13.94 bur-edge-04.inet.qwest.net
11 44 44 44  65.119.29.134 -
12 45 45 45  24.205.1.186 24-205-1-186.oc-nod.charterpipeline.net
13 45 46 45  24.205.1.166 24-205-1-166.oc-nod.charterpipeline.net
14 53 52 53  66.214.174.214 66-214-174-214.mpk-eres.charterpipeline.net

Trace complete



let us know

dl65  ::)
« Last Edit: May 17, 2005, 11:50:18 PM by dl65 » IP logged

If you don't know the answer, it isn't a dumb question.
Fed
Moderator
Sage



Thanked: 32
Posts: 8,172

Experience: Experienced
OS: Windows XP



« Reply #2 on: May 18, 2005, 12:16:12 AM »

I'm getting port scanned 10-15 times a day too and it's coming from my own server as well.  ???
My firewall shows...

Somebody is scanning your computer.
Your computer's TCP ports:
3410, 139, 445,  and 135 have been scanned from 202.172.109.16

... and I've just received 3 scans in the last 15 minutes.
Tha actual ports being scanned varies but it's normally about 8-10 different ports. Weird ???
IP logged
Unklefunky
Guest
« Reply #3 on: May 18, 2005, 08:56:22 AM »

My Norton firewall shows statistics in three area.  Personal firewall, Content blocking & and Parental Control.

Under personal firewall there are three catagories of statistics.  These are labeled: Last attacked on(date & time of attack); recent intrusion attempts(How many); most frequent attacker(IP Address for attacker).  

This is where I'm getting the information I posted earlier.  

Please advise.

IP logged
Flame
Moderator
Prodigy



Thanked: 6
Posts: 6,886

Think, dream, see, be... Everything.

« Reply #4 on: May 18, 2005, 12:59:40 PM »

Is this a wireless home network? Maybe someone has cracked into your network, and is using your network as a zombie, set to attack your computer(s)?

[glb]Flame[/glb]
IP logged
Fed
Moderator
Sage



Thanked: 32
Posts: 8,172

Experience: Experienced
OS: Windows XP



« Reply #5 on: May 18, 2005, 03:00:02 PM »

Record the intrusion logs & email them to your server  :)
Scan the guy back a few times  :D
Google for xxpoof  ;D
IP logged
Fed
Moderator
Sage



Thanked: 32
Posts: 8,172

Experience: Experienced
OS: Windows XP



« Reply #6 on: May 18, 2005, 09:41:02 PM »

SPF = Sygate Personal Firewall.


Port scan alerts

Most folks on the Internet since April 2004 have been seeing constant port scan alerts on their SPF.

These are some of the current Virus / Worms infecting machines and then trying to communicate out to others. They tend to look for similar IP numbers within their own ISP ranges, that’s why it looks to folks as if their ISP is scanning them. These are just other ISP customer machines that are infected. A number of folks have reported getting DoS (Denial of Service) alerts from SPF – DoS is when multiple machines are firing packets at your machine, and trying to ‘overload’ the system’s resources. Because so many folks have reported excessive port scans, it looks like some ISPs are very highly infected with these worms, and so SPF is seeing what would normally amount to a DoS attack.
IP logged
Pages: [1] - (Top) Print 
Home / Other / Other / computer to computer attacks « previous next »
 


Login with username, password and session length

Old Forum Search | Forum Rules
Copyright © 2010 Computer Hope ® All rights reserved.
Powered by SMF 2.0 RC3 | SMF © 2006–2010, Simple Machines LLC
Page created in 0.117 seconds with 20 queries.