I've been hacked... - GoFuckYourself.com

Krome · 10-06-2002, 09:37 PM

What do I do:

Somebody is scanning your computer - Port Scan -
Back Trace -
inetnum: 80.117.0.0 - 80.117.255.255
netname: TINIT-ADSL-LITE
descr: Telecom Italia
descr: Accesso ADSL BBB
country: IT
admin-c: BS104-RIPE
tech-c: BS104-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to [email protected]
notify: [email protected]
mnt-by: TIWS-MNT
changed: [email protected] 20020905
source: RIPE

route: 80.117.0.0/16
descr: INTERBUSINESS
origin: AS3269
notify: [email protected]
mnt-by: INTERB-MNT
changed: [email protected] 20011210
source: RIPE

person: BBBEASYIP STAFF
address: Via Val Cannuta, 250
address: I-00100 Roma
address: Italy
phone: +39 06 36881
e-mail: [email protected]
nic-hdl: BS104-RIPE
notify: [email protected]
changed: [email protected] 20001019
source: RIPE

7 Seconds Later, Same person -
Active Response - Traffic from IP address 80.117.201.157 is blocked from 10/07/2002 01:37:41 to 10/07/2002 01:47:41.

at exactly 01:47:46
Active Response which started at 10/07/2002 01:37:41 is disengaged. The traffic from IP 80.117.201.157 was blocked for 600 seconds.

but in the severity box it says information, is this just information for me that the block was removed or did the person get information?

(OK I know alot of you are going to start to scare the shit of out me now!!)

greentea · 10-06-2002, 09:43 PM

Your Fucked!

FORMAT C: NOW

chaze · 10-06-2002, 09:43 PM

We run into those attempts daily, Just keep your security up.

You might make it.

You might want to check out proxypass.com they block hacker proned proxies good product we use it on all of our shared servers.

It's the hackers that... oh shit I almost spilled th beans on what can really do damage.

Good luck,

Charles

Krome · 10-06-2002, 09:47 PM

chaze, could you email me please and tell me what you edited out.

Thanks
[email protected]

hyper · 10-06-2002, 09:51 PM

try this..

Please send abuse notification to [email protected]

EscortBiz · 10-06-2002, 10:10 PM

youve been served

Krome · 10-06-2002, 10:15 PM

Quote:

Originally posted by hyper
try this..

Please send abuse notification to [email protected]

I did send an abuse email but that is not really going to do that much good is it as they will not be able to trace the person who did it....or will they?

Krome · 10-06-2002, 10:45 PM

I know it is not much and this shit probably happens 5 times a second but it has really pissed me off.

pr0 · 10-06-2002, 11:19 PM

pear.ukc.ac.uk:80
209.182.73.155:80
newcollproxy.newcollpont.ac.uk:80
network183-92.wctc.net:8080
200.23.18.105:80
deland-002.mpinet.net:80
ns2.applicable.com:80
205.169.30.11:80
mail.hospice1.org:80
mail.deli2000.com:80
1eos30.eosinc.com:8080
216.221.99.139:8080
ws32.ambientfactor.fi:80

And they got lists of those a fucking mile long. Good luck reporting them all. Portscans can be done from behind socks proxies which can be chained by up to like 20 links. Bouncing all over the world. Just protect yourself the best you can, sit back & enjoy the ride.

pornJester · 10-06-2002, 11:37 PM

lol, i get dozens of port scans daily.. probably just some script kiddies hitting servers at random. If you have good managed hosting you should be fine.. if you don't have anyone handling your security end then maybe you should be concerned.

beemk · 10-06-2002, 11:53 PM

yeah you will probably never catch me, errr.... i mean them

10-06-2002, 09:37 PM	#1
Krome Confirmed User Join Date: Jul 2001 Location: London - UK Posts: 2,851	I've been hacked... What do I do: Somebody is scanning your computer - Port Scan - Back Trace - inetnum: 80.117.0.0 - 80.117.255.255 netname: TINIT-ADSL-LITE descr: Telecom Italia descr: Accesso ADSL BBB country: IT admin-c: BS104-RIPE tech-c: BS104-RIPE status: ASSIGNED PA remarks: Please send abuse notification to [email protected] notify: [email protected] mnt-by: TIWS-MNT changed: [email protected] 20020905 source: RIPE route: 80.117.0.0/16 descr: INTERBUSINESS origin: AS3269 notify: [email protected] mnt-by: INTERB-MNT changed: [email protected] 20011210 source: RIPE person: BBBEASYIP STAFF address: Via Val Cannuta, 250 address: I-00100 Roma address: Italy phone: +39 06 36881 e-mail: [email protected] nic-hdl: BS104-RIPE notify: [email protected] changed: [email protected] 20001019 source: RIPE 7 Seconds Later, Same person - Active Response - Traffic from IP address 80.117.201.157 is blocked from 10/07/2002 01:37:41 to 10/07/2002 01:47:41. at exactly 01:47:46 Active Response which started at 10/07/2002 01:37:41 is disengaged. The traffic from IP 80.117.201.157 was blocked for 600 seconds. but in the severity box it says information, is this just information for me that the block was removed or did the person get information? (OK I know alot of you are going to start to scare the shit of out me now!!)

10-06-2002, 09:43 PM	#2
greentea Confirmed User Join Date: Mar 2002 Location: South Florida Posts: 6,580	Your Fucked! FORMAT C: NOW __________________ blunts

10-06-2002, 09:43 PM	#3
chaze Confirmed User Industry Role: Join Date: Aug 2002 Posts: 9,752	We run into those attempts daily, Just keep your security up. You might make it. You might want to check out proxypass.com they block hacker proned proxies good product we use it on all of our shared servers. It's the hackers that... oh shit I almost spilled th beans on what can really do damage. Good luck, Charles Last edited by chaze; 10-06-2002 at 09:44 PM..

10-06-2002, 09:51 PM	#5
hyper Confirmed User Join Date: Mar 2002 Location: Mass Ass Posts: 5,294	try this.. Please send abuse notification to [email protected] __________________

10-06-2002, 10:10 PM	#6
EscortBiz Fuck Checks, CASH only! Join Date: May 2002 Location: New York City Posts: 19,422	youve been served __________________ Spanking, Medical Fetish, Sleeping, Strap-on Anal Lesbians, Girls Fucking Guys, Handjob site REAL HOT, Shemales, Anal and Ass Licking sites 100% Real EXCLUSIVE with amazing retention, ccbill payouts, lots of content FREE FTP HOSTING Promote the largest and oldest member paid escort site, Converts 10 times better then any dating site, CCBill payouts ICQ# 158802076

10-06-2002, 09:47 PM	#4
Krome Confirmed User Join Date: Jul 2001 Location: London - UK Posts: 2,851	chaze, could you email me please and tell me what you edited out. Thanks [email protected]

10-06-2002, 10:45 PM	#8
Krome Confirmed User Join Date: Jul 2001 Location: London - UK Posts: 2,851	I know it is not much and this shit probably happens 5 times a second but it has really pissed me off.

10-06-2002, 11:19 PM	#9
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	pear.ukc.ac.uk:80 209.182.73.155:80 newcollproxy.newcollpont.ac.uk:80 network183-92.wctc.net:8080 200.23.18.105:80 deland-002.mpinet.net:80 ns2.applicable.com:80 205.169.30.11:80 mail.hospice1.org:80 mail.deli2000.com:80 1eos30.eosinc.com:8080 216.221.99.139:8080 ws32.ambientfactor.fi:80 And they got lists of those a fucking mile long. Good luck reporting them all. Portscans can be done from behind socks proxies which can be chained by up to like 20 links. Bouncing all over the world. Just protect yourself the best you can, sit back & enjoy the ride.

10-06-2002, 11:37 PM	#10
pornJester Confirmed User Join Date: Mar 2001 Location: Florida Posts: 6,138	lol, i get dozens of port scans daily.. probably just some script kiddies hitting servers at random. If you have good managed hosting you should be fine.. if you don't have anyone handling your security end then maybe you should be concerned. __________________ FreshBucks \| Webmaster Vault \| GayAW Trusted Names in Adult. ICQ 9157.3698

10-06-2002, 11:53 PM	#11
beemk CLICK HERE Industry Role: Join Date: Jan 2002 Posts: 20,829	yeah you will probably never catch me, errr.... i mean them __________________ I host with Vacares