Hack attempt? - GoFuckYourself.com

C_U_Next_Tuesday · 06-11-2003, 02:53 PM

I'm sitting here minding my own business working when all of a sudden my norton antivirus starts "scanning outgoing e-mails"...since i was not even doing e-mails at the time.. and this program was overunning my computer.. i shut the bitch off..removed the norton program and rebooted..

now i got some fool using the IP 64.186.128.113 trying to access my computer over 5000 times in a matter of a few minutes. did a trace and came up with nothing substancial...and the fucker is still trying...anyone had this happen to them before ?

asuna · 06-11-2003, 02:55 PM

yeah that happend to me a few times, use zone alarm or any good firewall and you'll do ok, it might slow your connection abit, but that person will eventually tire out

lawked · 06-11-2003, 02:57 PM

You're probably already screwed. Start->run->cmd

netstat -ano

alt+cntl+del, click on the processes tab.
Look up, click on View and click Select Columns
Enable PID (Process Identifier)

Now get kinky and match up any listening sockets to the PID that
has it opened. Do a little research and see if something is running that shouldn't be.

Also you may wanna check

Start->run->winconfig ... click on startup tab and take a brief look.

It's a start anyways...

C_U_Next_Tuesday · 06-11-2003, 03:09 PM

lawked.. i checked the processes and nothing seems to be running out of norm.

Asuna, i have black ice and have never had a problem except for the usual everyday bullshit. this fucker is relentless... but must not be getting anywhere cause his attempts would be successes and not attempts
he is well over 10,000 attempts..good gawd i wish his parents would come home and take him off the computer now

thanks guys

p00p · 06-11-2003, 03:20 PM

He's port scanning your box.

C_U_Next_Tuesday · 06-11-2003, 06:47 PM

little fucker... I wanted to port scan his ass....He was probably sending spam mails from my ip..who knows..was pretty weird.

I unplugged the dsl and went to sleep for a few.. he is gone..for now.

WebTitan · 06-11-2003, 06:52 PM

gotta have a firewall in this day and age.

C_U_Next_Tuesday · 06-11-2003, 06:59 PM

Quote:

Originally posted by WebTitan
gotta have a firewall in this day and age.

I do, that was how i could tell he was fucking with my computer... I need to put it back on the router.. had it off the router and directly plugged into the dsl today..

bigdog · 07-05-2003, 10:32 AM

hey dont you get a new ip address when you turn off the dsl?

06-11-2003, 02:53 PM	#1
C_U_Next_Tuesday WW4L Join Date: Oct 2002 Location: over the river and through the woods Posts: 10,581	Hack attempt? I'm sitting here minding my own business working when all of a sudden my norton antivirus starts "scanning outgoing e-mails"...since i was not even doing e-mails at the time.. and this program was overunning my computer.. i shut the bitch off..removed the norton program and rebooted.. now i got some fool using the IP 64.186.128.113 trying to access my computer over 5000 times in a matter of a few minutes. did a trace and came up with nothing substancial...and the fucker is still trying...anyone had this happen to them before ?

06-11-2003, 02:55 PM	#2
asuna Confirmed User Join Date: May 2002 Location: Montreal Posts: 8,743	yeah that happend to me a few times, use zone alarm or any good firewall and you'll do ok, it might slow your connection abit, but that person will eventually tire out __________________

06-11-2003, 03:20 PM	#5
p00p Confirmed User Join Date: Dec 2002 Location: CanaDUH Posts: 5,125	He's port scanning your box. __________________ ICQ: 316365783 <a href="http://www.hostultra.com/~p00p" target="_blank">TEST</a>

06-11-2003, 02:57 PM	#3
lawked Confirmed User Join Date: Apr 2003 Location: Canada Posts: 354	You're probably already screwed. Start->run->cmd netstat -ano alt+cntl+del, click on the processes tab. Look up, click on View and click Select Columns Enable PID (Process Identifier) Now get kinky and match up any listening sockets to the PID that has it opened. Do a little research and see if something is running that shouldn't be. Also you may wanna check Start->run->winconfig ... click on startup tab and take a brief look. It's a start anyways...

06-11-2003, 03:09 PM	#4
C_U_Next_Tuesday WW4L Join Date: Oct 2002 Location: over the river and through the woods Posts: 10,581	lawked.. i checked the processes and nothing seems to be running out of norm. Asuna, i have black ice and have never had a problem except for the usual everyday bullshit. this fucker is relentless... but must not be getting anywhere cause his attempts would be successes and not attempts he is well over 10,000 attempts..good gawd i wish his parents would come home and take him off the computer now thanks guys

06-11-2003, 06:47 PM	#6
C_U_Next_Tuesday WW4L Join Date: Oct 2002 Location: over the river and through the woods Posts: 10,581	little fucker... I wanted to port scan his ass....He was probably sending spam mails from my ip..who knows..was pretty weird. I unplugged the dsl and went to sleep for a few.. he is gone..for now.

06-11-2003, 06:52 PM	#7
WebTitan Confirmed User Join Date: Mar 2003 Location: Western NY Posts: 5,114	gotta have a firewall in this day and age.

07-05-2003, 10:32 AM	#9
bigdog Confirmed User Join Date: Jul 2001 Posts: 6,964	hey dont you get a new ip address when you turn off the dsl?