Article View: sdnet.cablemodems
Article #14Re: How do I get rid of a hacker?
From: Pete McNab
Date: Wed, 12 Jan 2000 00:00
Date: Wed, 12 Jan 2000 00:00
29 lines
1912 bytes
1912 bytes
On Mon, 03 Jan 2000 11:33:23 GMT, Bud the Real <thekat@san.rxyzr.com> wrote: >Julio Garrovillas <garrovij@home.com> wrote: > >>My PC is being hacked by someone with this I.P. 24.2.6.194 I have >>installed a security program called Intruder Alert '99 so he can't get >>in my backdoor but he seems persistent at least once a day sometimes >>twice, the alarm would go off. Same I.P. address but I can't trace it >>back. >> >>Anyone know how to get rid of this guy? > >That is an IRC server for @home. DO you use IRC? IRC servers have started pinging for open ports due to other users on IRC attempting to abuse people's machines. This is not an "attack" but just a security safeguard on their side. This demonstrates a common problem with a lot of firewall software, in that it assumes that any incoming traffic is an attack. Basically, there is no problem, your security program is just a little overzealous. And if that is all you get, you are lucky. I get about 5-6 probes per day that are actually probing for weaknesses. If I see multiple ones from the same person, I report him to abuse@ his provider. Pete
Technical Details
Message-ID:
<slrn87pogu.6k1.stillers@slip-3.slip.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<386FFB94.1F973661@home.com> <97217s8utcni9c6tu533gge60b6nj9g3dq@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10298d,90b81359498d7e37 X-Google-Attributes: gid10298d,public X-Google-Thread: fa51b,90b81359498d7e37 X-Google-Attributes: gidfa51b,public X-Google-Thread: 10f392,90b81359498d7e37 X-Google-Attributes: gid10f392,public From: stillers@slip-3.slip.net (Pete McNab) Subject: Re: How do I get rid of a hacker? Date: 2000/01/12 Message-ID: <slrn87pogu.6k1.stillers@slip-3.slip.net> X-Deja-AN: 571783169 References: <386FFB94.1F973661@home.com> <97217s8utcni9c6tu533gge60b6nj9g3dq@4ax.com> Organization: Posted via Supernews, http://www.supernews.com User-Agent: slrn/0.9.5.4 (UNIX) Newsgroups: sdnet.cablemodems,cableinet.cable_modems,alt.Cable-ip X-Complaints-To: newsabuse@supernews.com