To: hawkeye who wrote (2959 ) 11/3/1999 2:08:00 AM From: hawkeye Respond to of 3679
hawkeye may spoken too soon in prior post: While writing prior post two additional "attacks" were made on hawkeye: here are reports: Oh My God!!! hawkeye being attacked by amateurs!! AND is being PING'D! YIKES!!!!!" " TCP port probe advICE :Intrusions :2003102 Someone is scanning your system for a hole that might allow them into your computer. Important: This is almost certainly from a "sweep" of the Internet, the intruder is scanning millions of machines, not just yours. False Positives A false-positive may occur if a service is temporarily unavailable. For example, if you are running a web-server and temporarily disconnect it, then you will see numerous probes against that port. These alerts are simply pointing out the anomaly that people are trying to connect to something that isn't there. Details This triggers because BlackICE saw an attempted connection, but no response. This means the intruder attempted to connect to something that was unavailable. Probes like this result from "script-kiddies". Hackers come in a wide variety of skill levels, at the bottom are the people just learning to hack who know how to run a few "attack scripts" that exploit a single vulnerability. They run these scripts against millions of systems on the hope of catching one or two that are vulnerable to the specific attack. Therefore, you should expect to see occasional port probes. " ---------------------------------------------------------------------- " TCP ACK ping advICE :Intrusions :2000310 Ping. Attacker is trying to determine whether your system is up by sending an unexpected TCP ACK frame. Usually a standard ICMP ECHO would be used to determine whether a remote system is up, but in this case, the attacker is probably trying to bypass a firewall which may block standard ECHO requests." hawkeye, (HACKED, ATTACKED, SCANNED, SCAMMED and PING'D) -- hawkeye not having very good day. hawkeye really happy he install Deep Ice Defender!! hawkeye now have total peace of mind knowing that he has been under constant attack by the masked highwaymen of the information super hi-way! Thanks Black Ice Defender! I really needed that!!!! (In all fairness to Black Ice Defender, the program immediately disconnects any unauthorized connections into the system. Try it, you'll love it!)