Copper Talk » Open Forum » Archived Messages » 2002 » 08/01/2002 to 08/31/2002 » HEY! « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Funtimebob
Posted on Monday, July 29, 2002 - 4:22 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Just Curious, Anybody else getting a lot of reports of port probes from their firewalls listing foreign addresses such as kabel.tel or kalisz.m
started getting a bunch of them as soon as I logged on to my AOl. I know its typical to get a report every 10-30 min. sometimes, but to have a couple dozen in only a couple of minutes...Maybe the al-Quada is looking for another bunch of unprotected systems to attack Wright-Patts computers again.....
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Monday, July 29, 2002 - 9:57 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

uhh, thats aol for you. WHOIS the address and email them asking them whats going on.
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Monday, July 29, 2002 - 9:59 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

also check your outgoing to see if any of your programs connect to those servers
Top of pagePrevious messageNext messageBottom of page Link to this message

707
Posted on Tuesday, July 30, 2002 - 1:30 am:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Interesting. I connected to AOL just to see, and among the usual stuff, found this address:

bloom.kabsi.at

I couldn't resolve it and disconnected as soon as I pinged it back.

I've not seen that one before.

the "kabel" you mentioned, sounds german or austrian and the "kalisz" is a polish region/city.

If you don't have any sniffer software, here's a small free app that will let you see stuff connecting realtime, plus do quick lookups and pings: http://download.com.com/3000-2085-6670321.html?tag=lst-0-2
Top of pagePrevious messageNext messageBottom of page Link to this message

Jimbob
Posted on Tuesday, July 30, 2002 - 2:27 am:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Foreigners are doing everything possible to ripoff Americans lately. Looking to drop a 'Trogen Horse', gather data (a credit card number, etc) and send info back for defrauding you. Or a password & order computers, etc on-line & drop-ship to their temporary address. You just can not believe the s*** out there!
Top of pagePrevious messageNext messageBottom of page Link to this message

Dx431
Posted on Tuesday, July 30, 2002 - 2:45 am:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

If you would like to illiminate the problem, drop AOL!!! Just a suggestion....
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Tuesday, July 30, 2002 - 4:18 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

go with a high speed provider, you will be much happier
Top of pagePrevious messageNext messageBottom of page Link to this message

2600
Posted on Wednesday, July 31, 2002 - 3:07 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Zone Alarm. Kevin Mitnick likes it. That was good enough for me. Stops all that stuff, or at least forces it to ask permission BEFORE it can 'phone home'.
(Hint: if a browser or ISP won't work with ZoneAlarm, drop it like a hot potato.)
73
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Wednesday, July 31, 2002 - 8:53 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Hey 2600, zonealarm is the best! If you would like the pro version 2600, email me!

Its my favorite "SOFTWARE" firewall.:)
Top of pagePrevious messageNext messageBottom of page Link to this message

2600
Posted on Wednesday, July 31, 2002 - 10:55 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Thanks for the offer, Taz, but I paid for the reg. already on 'pro. This computer is for business use anyway, so it's deductible. I really don't care who runs what programs in the privacy of their homes, but I have had a policy of buying software that is used here for the business. I get some odd looks from folks who find out. They think I'm nuts to PAY for software. The way I see it, any storm trooper from the SPA or whoever can walk in during business hours and catch a glance of any screen I am using. If it's all legit, no worries. I just feel more vulnerable at work than at home. The free version is plenty good enough for the one at home, so again thanks, but I'm covered.
73
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Thursday, August 01, 2002 - 2:20 am:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

No worries mate, heh :)
Top of pagePrevious messageNext messageBottom of page Link to this message

Jimbob
Posted on Thursday, August 01, 2002 - 12:30 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

I agree, been using Zone Alarm sinse last fall. Per a report on a cyber punk group trying to shutdown/break into a commercial business, Zone Alarm stopped every attempt- its free on-line!
Top of pagePrevious messageNext messageBottom of page Link to this message

Taz
Posted on Thursday, August 01, 2002 - 8:42 pm:   Edit Post Delete Post    Move Post (Moderator/Admin Only)

Any "real" hacker can pop a software windows firewall. Now a hardware firewall such as a router is much much more difficult, of course even a "real" hacker can get through one of those to by sending it certain code to make it beleive the hacker is a "good" person. Im sure 707 could explain it better than I.