Anyone wanna help me bust a fucker probing my machine? - GoFuckYourself.com

Fletch XXX · 07-04-2002, 10:22 PM

Only reason I am bringing this up is because I really believe its someone here. And after 3 days, Im ready to fish em out.

I have this ip surfing my sites, and have watched it a couple days now.

Here's the ip.

10.58.87.250 (DNS)

Any help?

Sly_RJ · 07-04-2002, 10:22 PM

Hit me up.

Fletch XXX · 07-04-2002, 10:24 PM

Multiple attempts within the last hour.

pr0 · 07-04-2002, 10:24 PM

dos the bitch till he gets the idea

unless its a socks proxy, in which case you might be dos'ng a university somewhere

[Labret] · 07-04-2002, 10:27 PM

If you are on broadband, you would get hit alot.

I am on cable, and my machine is hit god knows how many times a day.

I think its quite common out there with all the slave machines out there.

My paysites get pounded by portscans from machines that I know must have had BO installed or some other shit.

Its no big deal. Just keep your shit tight and you can keep out 99% of the script kiddies.

wi11 · 07-04-2002, 10:27 PM

fletch what operating system you running? If you using win2k use the network monitor you can find some interested info in there you might have a better chance at seeing everything that ip is doing =)

PicsULove · 07-04-2002, 10:28 PM

doesnt resolve when i try to dns it :-/ good luck

Fletch XXX · 07-04-2002, 10:31 PM

Labret: totally understand bro, I get at least 300 attempts a day on this network.

The ip isnt doing shit to my machine, its blocked, its not making it in.

I keep getting the alerts for

"The firewall has blocked Internet access to 10.58.87.250 (DNS) from your computer."

Thing is bro, I have the ip coming into my sites from this board. I have the ip surfing my design page, whos been surfin my design page?

And then if they were surfing my design page, how are they hitting my computer at home?

This is the only thing thats making me squint.

hyper · 07-04-2002, 10:32 PM

Hostname: No Reverse DNS Entries
IP Address: 10.58.87.250
Decimal Address: 0171595770
-------------------------------------------

---------------------------Whois Results---------------------------

---------------------------Arin Results---------------------------

IANA (RESERVED-6)
Internet Assigned Numbers Authority
4676 Admiralty Way, Suite 330
Marina del Rey, CA 90292-6695
US

Netname: RESERVED-10
Netblock: 10.0.0.0 - 10.255.255.255
\
isnt 10.***.***.*** reserved for your own network?

cherrylula · 07-04-2002, 10:33 PM

That ip# hit my site yesterday during the height of the big flame war (right after the url was posted).

Now its hitting his computer. Can it be a coincidence? err or is it something else.

reddawg · 07-04-2002, 10:35 PM

Wel Fletch for being an asshole to you and driving you nuts for several days, I have given into your plight and offer the URL for DNS offenders and I hope it helps. Catch the scumbag

http://packetstormsecurity.nl/papers...ls/mi004en.htm

pr0 · 07-04-2002, 10:37 PM

i thought 10.* was reserved for your own network just like 192. & 127.

In fact im pretty sure it is...maybe someone is spoofing an internal network ip trying to worm their way into your shit.

B40 · 07-04-2002, 10:39 PM

Hehe good thing it ain't me

Fletch XXX · 07-04-2002, 10:40 PM

Not sure , thats why I brought it to you guys.

All I know is how to keep em out, but id like to expose em if possible.

yys · 07-04-2002, 10:43 PM

Quote:

Originally posted by pr0
i thought 10.* was reserved for your own network just like 192. & 127.

In fact im pretty sure it is...maybe someone is spoofing an internal network ip trying to worm their way into your shit.

Yeah, it's reserved for private networks

07-04-2002, 10:22 PM	#1
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	Anyone wanna help me bust a fucker probing my machine? Only reason I am bringing this up is because I really believe its someone here. And after 3 days, Im ready to fish em out. I have this ip surfing my sites, and have watched it a couple days now. Here's the ip. 10.58.87.250 (DNS) Any help? __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

07-04-2002, 10:22 PM	#2
Sly_RJ Live Hard - Die Hard Join Date: Feb 2002 Location: Ready to leave... Posts: 17,042	Hit me up. __________________ PHAT SERVERS - Quality dedicated hosting at a quality price! sly AT phatservers DOT com - 147479144

07-04-2002, 10:24 PM	#3
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	Multiple attempts within the last hour. __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

07-04-2002, 10:28 PM	#7
PicsULove Registered User Join Date: Apr 2002 Location: Houston Posts: 82	doesnt resolve when i try to dns it :-/ good luck __________________ <a href="http://www.PicsULove.com>PicsULove.com</a>

07-04-2002, 10:31 PM	#8
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	Labret: totally understand bro, I get at least 300 attempts a day on this network. The ip isnt doing shit to my machine, its blocked, its not making it in. I keep getting the alerts for "The firewall has blocked Internet access to 10.58.87.250 (DNS) from your computer." Thing is bro, I have the ip coming into my sites from this board. I have the ip surfing my design page, whos been surfin my design page? And then if they were surfing my design page, how are they hitting my computer at home? This is the only thing thats making me squint. __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me

07-04-2002, 10:24 PM	#4
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	dos the bitch till he gets the idea unless its a socks proxy, in which case you might be dos'ng a university somewhere

07-04-2002, 10:27 PM	#5
[Labret] Registered User Industry Role: Join Date: May 2001 Location: Са́нкт-Петербу́рг Posts: 10,945	If you are on broadband, you would get hit alot. I am on cable, and my machine is hit god knows how many times a day. I think its quite common out there with all the slave machines out there. My paysites get pounded by portscans from machines that I know must have had BO installed or some other shit. Its no big deal. Just keep your shit tight and you can keep out 99% of the script kiddies.

07-04-2002, 10:27 PM	#6
wi11 Registered User Join Date: Apr 2002 Posts: 69	fletch what operating system you running? If you using win2k use the network monitor you can find some interested info in there you might have a better chance at seeing everything that ip is doing =)

07-04-2002, 10:32 PM	#9
hyper Confirmed User Join Date: Mar 2002 Location: Mass Ass Posts: 5,294	Hostname: No Reverse DNS Entries IP Address: 10.58.87.250 Decimal Address: 0171595770 ------------------------------------------- ---------------------------Whois Results--------------------------- ---------------------------Arin Results--------------------------- IANA (RESERVED-6) Internet Assigned Numbers Authority 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292-6695 US Netname: RESERVED-10 Netblock: 10.0.0.0 - 10.255.255.255 \ isnt 10.*..** reserved for your own network? __________________

07-04-2002, 10:33 PM	#10
cherrylula lol Industry Role: Join Date: Jan 2002 Posts: 15,969	That ip# hit my site yesterday during the height of the big flame war (right after the url was posted). Now its hitting his computer. Can it be a coincidence? err or is it something else.

07-04-2002, 10:35 PM	#11
reddawg Confirmed User Join Date: Apr 2002 Location: Paradise Posts: 1,837	Wel Fletch for being an asshole to you and driving you nuts for several days, I have given into your plight and offer the URL for DNS offenders and I hope it helps. Catch the scumbag http://packetstormsecurity.nl/papers...ls/mi004en.htm __________________ ICQ 146104506 <p> <a href="http://sexsentry.com"</a><img src="http://sexsentry.com/pics/sentry2.gif" alt="All new Sentry. More options and more exposure and more ways to make even more money by using Sentry Elite and try our new create your own custom entrance script and so many more features, many are still in development, but awesome changes are going on at Sex Sentry!"> </p>

07-04-2002, 10:37 PM	#12
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	i thought 10.* was reserved for your own network just like 192. & 127. In fact im pretty sure it is...maybe someone is spoofing an internal network ip trying to worm their way into your shit.

07-04-2002, 10:39 PM	#13
B40 Confirmed User Join Date: Jul 2001 Posts: 7,020	Hehe good thing it ain't me __________________

07-04-2002, 10:40 PM	#14
Fletch XXX GFY HALL OF FAME DAMMIT!!! Join Date: Jan 2002 Location: that 504 Posts: 60,840	Not sure , thats why I brought it to you guys. All I know is how to keep em out, but id like to expose em if possible. __________________ Want an Android App for your tube, membership, or free site? Need banners or promo material? Hit us up (ICQ Fletch: 148841377) or email me fletchxxx at gmail.com - recent work - About me