Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Someone At Earthlink Trying To Hack Into My PC?
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
How to turn off Data Execution Prevention in SP2 »
« HJT Log -serious problems after several scans  
AuthorAll Replies


disorder
Useful Idiot
Premium
join:2003-04-16
Alexandria, VA
clubs:

2 edits
reply to disorder
Re: Someone At Earthlink Trying To Hack Into My PC

oops, I posted the wrong one, anyways that info should be enough right?


nevertheless
Premium,VIP
join:2002-03-08
Burlington, ON
·Cogeco Cable

said by disorder See Profile:
oops, I posted the wrong one, anyways that info should be enough right?
No. That's just the ARIN information for Earthlink, ie: how to contact that ISP on an administrative level.
--
Some people think I'm an idiot. I disagree, but idiocy is subjective--so they may well be right. With this in mind, take everything I post with a grain of salt, eh?


disorder
Useful Idiot
Premium
join:2003-04-16
Alexandria, VA
clubs:

1 edit
Ah... I see soo it should be someone using the actual service then. Where could I get the full log on my pc?
I want to know the f*ck that was trying to do this...


nevertheless
Premium,VIP
join:2002-03-08
Burlington, ON
·Cogeco Cable

said by disorder See Profile:
Ah... I see soo it should be someone using the actual service then. Where could I get the full log on my pc?
Most likely it's simply a user of theirs that's been scanning you, and your firewall has kindly looked up the administrative contact info for you.
said by disorder See Profile:
I want to know the f*ck that was trying to do this...
Earthlink won't tell you, that would violate their subscriber confidentiality agreement.

It doesn't really matter, odds are it's simply another worm, virus, or trojan doing it's automated scanning.

Go into your firewall again, find the log(s) that gets you timestamp, port information (both source and destination) and email that to their abuse contact listed in their ARIN information.
--
Some people think I'm an idiot. I disagree, but idiocy is subjective--so they may well be right. With this in mind, take everything I post with a grain of salt, eh?


Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA

said by nevertheless See Profile:
Go into your firewall again, find the log(s) that gets you timestamp, port information (both source and destination) and email that to their abuse contact listed in their ARIN information.
No, please don't: users who don't know how to read firewall logs put an awful burden on abuse departments.

Much better is to use the myNetWatchman service, where your firewall logs are submitted to a central server, and summarized logs are sent to the ISPs. This makes it much easier on the ISP because they get everything in one deliverable.

It's free and easy.

Steve
--
Stephen J. Friedl * Security Consultant * Tustin, California USA * my web site


disorder
Useful Idiot
Premium
join:2003-04-16
Alexandria, VA
clubs:

1 edit
Thanks steve I will surely check it out.


nevertheless
Premium,VIP
join:2002-03-08
Burlington, ON
·Cogeco Cable

reply to Steve
said by Steve See Profile:
Much better is to use the myNetWatchman service, where your firewall logs are submitted to a central server, and summarized logs are sent to the ISPs. This makes it much easier on the ISP because they get everything in one deliverable.
I wsa going to get to that, but I find it's easier to make them see how annoying and how much of a hassle it is to do this whole thing the first time.
--
Some people think I'm an idiot. I disagree, but idiocy is subjective--so they may well be right. With this in mind, take everything I post with a grain of salt, eh?


Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA

said by nevertheless See Profile:
I was going to get to that, but I find it's easier to make them see how annoying and how much of a hassle it is to do this whole thing the first time.
So to make your point you sic him on a poor, defenseless abuse desk?

Maybe we should start sending stuff to you at abuse@cogeco.ca?
--
Stephen J. Friedl * Security Consultant * Tustin, California USA * my web site


nevertheless
Premium,VIP
join:2002-03-08
Burlington, ON
·Cogeco Cable

said by Steve See Profile:
Maybe we should start sending stuff to you at abuse@cogeco.ca?
Many of the people in this forum already do--via Mynetwatchman!
--
Some people think I'm an idiot. I disagree, but idiocy is subjective--so they may well be right. With this in mind, take everything I post with a grain of salt, eh?
Forums » Up and Running » Security » SecurityHow to turn off Data Execution Prevention in SP2 »
« HJT Log -serious problems after several scans  


Saturday, 28-Nov 04:27:42 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [121] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [71] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [66] Verizon CEO: Hulu Will Be Dead Soon
· [62] Thanksgiving Open Thread
· [50] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· [Newsgroups] Newzleech down? [Filesharing Software]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· Backstab vs screws (not which to use) [Home Repair & Improvement]
· [Newsgroups] Black Friday Usenet! [Filesharing Software]
· Is Gear Score now the new requirement to get pug invite? [World of Warcraft]
· DIR-655 New Beta 1.32b09 [D-Link]
· TSI Usenet vs. Paid Usenet [TekSavvy]
· Why does it take so long? Mail question [General Questions]
· [WIN7] Outlook express under Windows 7? [Microsoft Help]