|
Author |
Message |
| Common
Ground / Security Blanket
- Computer Questions / Major Hack Attack this AM |
dizneemom
Cast Member
Posts: 90
Registered: Aug 2002
|
Posted
09-27-02 08:51 AM
Man, my firewall got hammered this morning. I finally had to disconnect my connetion and reconnect to my IP to make it stop. Can anybody help me with Norton?
Basically, I had 263 attacks within a 30 minute period from 87 attackers the most frequent attacker being:
12.149.217.142
How do I go about tracking this IP address and the number of others that Norton has blocked and how do I report this to my IP? Any help for this novice would be appreciated. Thanks!
Lisa D
----------------------------------------
"Only two things are infinite, the universe and human stupidity, and I'm not sure about the former."
- Albert Einstein (1879-1955)
|
|
Lunarlady
Cast Member
Posts: 1629
Registered: Aug 2002
|
Posted
09-27-02 12:18 PM
DizneeMom:
I could find very little info for the address:
WHOIS Query Result for 12.149.217.142:
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
CONSOLIDATED DELIVERY AN CONSOLID417-217-128 (NET-12-149-217-128-1)
12.149.217.128 - 12.149.217.143
# ARIN Whois database, last updated 2002-09-26 22:05
# Enter ? for additional hints on searching ARIN's Whois database.
This is an excellent website for tracking addresses, though:
http://www.amnesi.com/hostinfo/ipinfo.jhtml
A whole week of peaceful bliss, beginning with a giggle
and ending with a kiss. |
|
dizneemom
Cast Member
Posts: 90
Registered: Aug 2002
|
Posted
09-27-02 01:18 PM
Thanks for the help, LL. I especially appreciate that you took the time to do this when your own system was attacked this AM.
Lisa D
----------------------------------------
"Only two things are infinite, the universe and human stupidity, and I'm not sure about the former."
- Albert Einstein (1879-1955)
|
|
Crank
Administrator
Posts: 1957
Registered: Aug 2002
|
Posted
09-27-02 06:43 PM
quote:
dizneemom wrote:
Thanks for the help, LL. I especially appreciate that you took the time to do this when your own system was attacked this AM.
Judging from the hops I would say that it's not in this country. I'd bet the address is spoofed.
I like persons better than principles, and I like persons with no principles better than anything else in the world.
Oscar Wilde, The Picture of Dorian Gray, 1891
BOYCOTT FRENCH TOAST, GERMAN SAUSAGE AND BELGIAN CHOCOLATES
Crank-->
All Content is © the Poster and is to be considered Intellectual Property. All Rights Reserved. Though Brilliant, Breathtaking and Extrememly Well Written the Content contained herein is Opinion and Opinion only.
ib4cruzn at charter dot net
|
|
Lunarlady
Cast Member
Posts: 1629
Registered: Aug 2002
|
Posted
09-27-02 07:28 PM
Not a problem! I'm getting better and better at restores. Now if I could just figure out a decent boomerang program that will send the nasty bugger back where it came from....
A whole week of peaceful bliss, beginning with a giggle
and ending with a kiss. |
|
Robey
Cast Member
Posts: 1023
Registered: Aug 2002
|
Posted
09-28-02 07:49 PM
It started in Santa Clara, CA, then went to Parsippany N.J.
then it drops it at ATT
http://security1.norton.com/ssc/hom...ZOGIJPUVGCWETOM
Choose: Trace a potential Attacker
[Edited by Robey]
I always wondered why somebody didn't do something about that. Then I realized I was somebody. --Lily Tomlin
|
|
Robey
Cast Member
Posts: 1023
Registered: Aug 2002
|
Posted
09-28-02 08:08 PM
quote:
dizneemom wrote:
Man, my firewall got hammered this morning. I finally had to disconnect my connetion and reconnect to my IP to make it stop. Can anybody help me with Norton?
Basically, I had 263 attacks within a 30 minute period from 87 attackers the most frequent attacker being:
12.149.217.142
GO TO: Norton's "Trace a Potential Attacker"
http://security1.norton.com/ssc/hom...ZOGIJPUVGCWETOM
Please let us know what you find.
[Edited by Robey]
I always wondered why somebody didn't do something about that. Then I realized I was somebody. --Lily Tomlin
|
|
AmyA
Cast Member
Posts: 104
Registered: Aug 2002
|
Posted
09-28-02 09:31 PM
quote:
Lunarlady wrote:
DizneeMom:
This is an excellent website for tracking addresses, though:
http://www.amnesi.com/hostinfo/ipinfo.jhtml
LL, I have also been getting hit a lot tonight, most commonly by
213.231.69.126
Every time I try to go to www.amnesi.com, I get an Internal Server Error message. I have accessed Amnesi numerous times in the past, so I am wondering if you know what is up with that? Also, SamSpade.org's Whois function has been down for at least a couple of days. Are there any more site you know of that have the capability of doing a Whois search? Thanks!
AmyA
I am a peon who has been kicked to the curb
|
|
|
Common
Ground / Security Blanket
- Computer Questions / Major Hack Attack this AM |
