1.

Solve : computer to computer attacks?

Answer»

Recently my computer has been attacked at least 10-15 times daily.  I checked the IP address for the attacker and found that it's my ISP's home office.

Why WOULD this be happening?

(66.214.174.214) This is the IP address for the attacker.  

Does anyone have any suggestions as to how I can fix this issue?  I've contacted my ISP and they say they know nothing.unklefunky......Could you explain what you mean by attacked 10 to 15 times a day .
Are you sure thats the correct url ......when I search it this is what I come up with .....

TraceRoute to 66.214.174.214 [66-214-174-214.mpk-eres.charterpipeline.net]

Hop (ms) (ms) (ms)  IP Address Host NAME
1 1 0 0  66.98.244.1 gphou-66-98-244-1.ev1.net
2 3 0 0  66.98.241.4 gphou-66-98-241-4.ev1.net
3 3 0 0  66.98.240.6 gphou-66-98-240-6.ev1.net
4 4 1 3  129.250.10.229 ge-2-1-0.r02.hstntx01.us.bb.verio.net
5 13 10 10  129.250.5.100 p16-0-3-0.r21.dllstx09.us.bb.verio.net
6 9 9 9  129.250.3.29 p16-2-0-0.r00.dllstx09.us.bb.verio.net
7 9 8 9  129.250.9.82 p4-0.qwest.dllstx09.us.bb.verio.net
8 9 9 9  205.171.25.45 dal-core-01.inet.qwest.net
9 42 42 42  205.171.13.6 bur-core-03.inet.qwest.net
10 42 42 42  205.171.13.94 bur-edge-04.inet.qwest.net
11 44 44 44  65.119.29.134 -
12 45 45 45  24.205.1.186 24-205-1-186.oc-nod.charterpipeline.net
13 45 46 45  24.205.1.166 24-205-1-166.oc-nod.charterpipeline.net
14 53 52 53  66.214.174.214 66-214-174-214.mpk-eres.charterpipeline.net

Trace complete



let us know

dl65  I'm getting port scanned 10-15 times a day too and it's coming from my own server as well.  
My firewall shows...

Somebody is scanning your computer.
Your computer's TCP ports:
3410, 139, 445,  and 135 have been scanned from 202.172.109.16

... and I've just received 3 scans in the last 15 minutes.
Tha actual ports being scanned varies but it's normally about 8-10 different ports. Weird My Norton firewall shows statistics in three area.  Personal firewall, Content blocking & and Parental Control.

Under personal firewall there are three catagories of statistics.  These are labeled: Last attacked on(date & time of attack); recent intrusion attempts(How many); most frequent attacker(IP Address for attacker).  

This is where I'm getting the information I posted earlier.  

Please advise.

Is this a wireless home network? Maybe someone has cracked into your network, and is using your network as a zombie, set to attack your computer(s)?

[glb]Flame[/glb]Record the intrusion logs & email them to your server  
Scan the guy back a few times  
Google for xxpoof  SPF = Sygate Personal Firewall.


Port scan alerts

Most folks on the Internet since April 2004 have been seeing constant port scan alerts on their SPF.

These are some of the CURRENT Virus / Worms infecting machines and then trying to communicate out to others. They tend to look for similar IP NUMBERS within their own ISP ranges, that’s why it looks to folks as if their ISP is scanning them. These are just other ISP customer machines that are infected. A number of folks have reported getting DoS (Denial of Service) alerts from SPF – DoS is when multiple machines are firing packets at your machine, and trying to ‘overload’ the system’s resources. Because so many folks have reported excessive port scans, it looks like some ISPs are very highly infected with these worms, and so SPF is seeing what would normally amount to a DoS attack.



Discussion

No Comment Found