🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sdnet.cablemodems
Article #14

Re: How do I get rid of a hacker?

#14
From: Pete McNab
Date: Wed, 12 Jan 2000 00:00
29 lines
1912 bytes
On Mon, 03 Jan 2000 11:33:23 GMT, Bud the Real <thekat@san.rxyzr.com> wrote:
>Julio Garrovillas <garrovij@home.com> wrote:
>  
>>My PC is being hacked by someone with this I.P. 24.2.6.194  I have
>>installed a security program called Intruder Alert '99 so he can't get
>>in my backdoor but he seems persistent at least once a day sometimes
>>twice, the alarm would go off. Same I.P. address but I can't trace it
>>back.
>>
>>Anyone know how to get rid of this guy?
>
>That is an IRC server for @home.  DO you use IRC?

IRC servers have started pinging for open ports due to other users on
IRC attempting to abuse people's machines.  This is not an "attack"
but just a security safeguard on their side.

This demonstrates a common problem with a lot of firewall software,
in that it assumes that any incoming traffic is an attack.  

Basically, there is no problem, your security program is just a little
overzealous.

And if that is all you get, you are lucky.  I get about 5-6
probes per day that are actually probing for weaknesses.  If I 
see multiple ones from the same person, I report him to abuse@
his provider.

Pete
Technical Details
Message-ID: <slrn87pogu.6k1.stillers@slip-3.slip.net>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <386FFB94.1F973661@home.com> <97217s8utcni9c6tu533gge60b6nj9g3dq@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10298d,90b81359498d7e37
X-Google-Attributes: gid10298d,public
X-Google-Thread: fa51b,90b81359498d7e37
X-Google-Attributes: gidfa51b,public
X-Google-Thread: 10f392,90b81359498d7e37
X-Google-Attributes: gid10f392,public
From: stillers@slip-3.slip.net (Pete McNab)
Subject: Re: How do I get rid of a hacker?
Date: 2000/01/12
Message-ID: <slrn87pogu.6k1.stillers@slip-3.slip.net>
X-Deja-AN: 571783169
References: <386FFB94.1F973661@home.com> <97217s8utcni9c6tu533gge60b6nj9g3dq@4ax.com>
Organization: Posted via Supernews, http://www.supernews.com
User-Agent: slrn/0.9.5.4 (UNIX)
Newsgroups: sdnet.cablemodems,cableinet.cable_modems,alt.Cable-ip
X-Complaints-To: newsabuse@supernews.com