I know most people on this forum are in the IT industry so maybe you can help.

I keep having some one port probe me the count is over 150 times. Black ICE defender had blocked them but they keep trying over and over again. Even when Typing this message there have been over 10 more attacks from the same IP address.

 

62.110.110.205

 

What Can I Do

 

PLEASE HELP. ITS ANOYING AND WORRYING

 

Stuart

a) make sure your firewall is configured correctly, if you're not sure then disconnect

 

b) track down the ISP from which the attack is comming

 

c) report the problem to that ISP

62.110.110.205 is owned by someone from Milan, Italy

 

Last hop is from interbusiness.it (prolly the ISP)

 

If you need more help tracing/nuking this guy...let me know

 

Eric

 

1 x.x.x.x 2 ms 1 ms 1 ms

2 xxxx (x.x.x.x) 5 ms 8 ms 6 ms

3 xxxx (x.x.x.x) 9 ms 14 ms 6 ms

4 main-gw2-f1-1.cwci.net (194.6.80.254) 16 ms 8 ms 24 ms

5 seabone-l1-gw0.cwci.net (195.44.30.98) 127 ms 132 ms 232 ms

6 gi-eth-2-pa5.seabone.net (195.22.205.251) 192 ms 91 ms 105 ms

7 ibs-10-it-pa5.seabone.net (195.22.196.146) 77 ms 63 ms 79 ms

8 r-rm99-fa3.interbusiness.it (151.99.29.142) 99 ms 127 ms 135 ms

9 r-mi213-rm99-a.interbusiness.it (151.99.99.50) 113 ms 124 ms 70 ms

10 r-mi225-fa4.interbusiness.it (151.99.75.216) 76 ms 76 ms 77 ms

11 r-mi6-fa10.interbusiness.it (151.99.57.133) 114 ms 108 ms 127 ms

12 62.86.15.18 (62.86.15.18) 118 ms * 135 ms

 

Ignore the xx's - somethings are confidential !

oh and he's got port 12345 open (NETbus)

 

hint..hint..

 

 

I know little about the internet but could this be an echo?. It is happening all the time as soon as I log on! But here is the strange thing, when I log on and and then turn my modem off, the attacks still happen but if I disconnect the cable from the modem to the computer they stop. I know in theory that once the modem is off no data should be able to get through. I have broadband by the way.

Also the attacks go up 3 at a time.

The location of the attackers IPS is Vatican City Italy. Could this be God trying to speek to me through the Pope?

 

Any more suggestions or help. The time it to write this I have been Probed 27 times from the same address.

 

Stuart

You're sure your PC is not infected by a Trojan (like Netbus) ?

 

-Eric

I am starting to think of that. I have Norton 2000 and the latest virus string, that found nothing. What Virus scanner is the best, and is there any way of checking for it!?

 

 

Stuart

Not sure which OS you're running, but try a 'NETSTAT -a' (in a shell or dos-prompt)

 

ports above 10000 that are listening, "can" be signs of a Trojan

 

Also see if there any ports connected to ip-addresses or hosts that look suspicious to you (addresses that you're not aware of beeing connected to).

 

If you need further help, send me an email..

 

-Eric

I think I'll jump on the bandwagon here with a Q that all you I.T bods should have no problem with!

What is the best/easiest way to get info from a text box on a website into an Access database?

Cheerz

Dave

Dave, I'm not so sure if you want to go that route (use M$ Access)

 

But anyway..I think you can create a webpage based on a database (or vice versa).

within Access itself.

You just have to save it as HTML and publish it and stuff..

The server that hosts your webpage(s) + database needs to be configured to support HTX/IDC-files though.

 

-Eric

 

 

 

[This message has been edited by lymon (edited 19-07-2001).]

Get the cleaner www.thecleaner.com

Hunts out most trojans.

If the guy probing you has netbus server running i'll mail you the client and you can have some real fun hehe ;-)

Glen.

ooops I meant http://www.tucows.com/preview/59852.html

Soz

Thanks Glen,

I have installed windows, after I deleted about 90% of my HDD. And guess what no attacks. At about 4pm I was getting probed by about 30 different IP addresses every hour as well as the other one. In the end I had over 400 probes by that one IP address. It must have been a Torjan on system. All has been clear for an hour. WOW!

 

Thanks all for your help!

 

Stuart