SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: c.horn who wrote (8599)3/8/2000 9:43:00 PM
From: Tom Swift  Read Replies (1) | Respond to of 110626
 
I've had 36 suspicious attacks since installing the software. This is from a total of three sources one of which is responsible for 34 of the 36.

This is also the one that probably was not an actual attack. If you read the FAQ, on a dial-up, you will get false positives if you connect to a port that someone else just disconnected from while requesting information.

The other two had what look like spoofed DNS #s. I didn't check, but they didn't look right -- these were probably real attacks.



To: c.horn who wrote (8599)3/8/2000 9:51:00 PM
From: NickSE  Respond to of 110626
 
Fyi, I have found most of the attempts to be different everyday and have come to the realization that paying attention to all the attempted probes/attacks on my PC is way too time consuming especially considering BI is doing its job of fending off attackers.

The only thing I will do if I get a persistant prober is I will trace their IP using the following program and usually he or she gets the clue I'm aware of their doings and tend to disappear.

NetLab (says Win95, but also works in Win98)
hotfiles.zdnet.com

Also, if you end up getting an attack with a higher severity rating, consider sending the log to their ISP. Its usually an email address like this abuse@offenders ISP here.com (i.e. my ISP is @Home so it would be sent to abuse@home.com with the log attack record). If the ISP is responsible and maintains an active monitoring program of its users, they will most likely get suspended.

We need to start listing their ISP numbers and names to see if there is a pattern.

My 2 cents,
Nick