OT: What Does This Mean?

[Ruatha]

I rarely use my hardware firewall, right now it stands in the closet, the software firewall has kept me safe for over a year now. I'm quite satisfied with it.

Broadband constant connection since 1998 and never had any intrusion, trojan or virus.
(I've had the "Form A" virus, but that was 1994 I think and it came on a floppy, and it was pretty harmless.)

[ August 02, 2004, 23:39: Message edited by: Ruatha ]

[Katchoo]

I usually just ignore Messages like that from my Firewall. The only time your eyebrows should be going up is if you get several Messages in a row involving the same outside IP, or, if looking through your Firewall log (which is good to do every now and then) you see a pattern of attempts by the same IP at the same time of day every day. Stuff like that usually means someone (or some software) is persistantly trying to get into your System. When that occurs, do a search of what ISP that IP comes from, and send that ISP an e-mail detailing what's happening.

I had someone from Pairs port scanning my System repeatedly for 2 or 3 hours strait on a couple of different days, so I tracked down the ISP and sent them an e-mail. I got a quick response back, but unfortunately the ISP apparently didn't have anyone there that could read english, so I didn't get much futher with them. But the port scanning stopped shortly after

If your firewall is 'popping up' Messages like a pop-up whenever an intrusion is detected, you can disable the pop-ops. Norton does that unless you disable it (which I did).

[Gandalf Parker]

All machines on the net will get probed. Some are automatic scripts, some are installed programs (trojans/viruses) from someone elses machine and they might not know its doing it, some might be accidental.

If a random roaming probe finds something "interesting" then you might get a return visit which continually tries different things and different ports. Thats something worth reporting.

Alot of what I do is forensics of systems that are broken into. Anymore its getting hard to find any to work on. Even honeypots dont work anymore.

[Instar]

Its the aliens. Really, I'm sure of it.

[Fyron]

That is because you are one of them!

*masses armada to destroy looming Insatian fleet*

[Instar]

bwhahahaahah
indeed, fear my robotic kitten armies!

think about how awesome an army of robotic kittens would be...

Soldier 1: "Ah, they're soooo cute!"
Robokitten: "mew mew mew"
Soldier 2: "Awwww...."
Soldier 1: "... what the? OH GOD its clawing my face off!!"
Soldier 2: "They're so cute yet so diabolical!"

[ August 03, 2004, 02:35: Message edited by: Instar ]

[Atrocities]

I am just a PB ya know.