- This topic has 4 replies, 3 voices, and was last updated 22 years, 7 months ago by
.
-
Posts
-
i run a firewall program as most people do,but i keep getting attacked and i would like to know who it is and report them before they vause damage to me or to others,ive had fragment attacks,port scan attacks and a newtear attack or something of the sorts. I need to know how to use the Ip im getting to trace it back to the name so i can report the person to anyone and everyone that can possibly do something to the individual. I would really appreciate help on THIS subject and not a bunch of people ranting on about everything but a program that works well in what im trying to acomplish.Ive tried a few programs but they dont seem to be what i need,i know there is atleast 1 program out there that does work from hearing about all the idiots that use it to gain acess to unsuspecting innocent ,people PLEASE HELP ASAP!!
THANK YOU!Well, this is kind of the wrong forum for this, but we can help you. One good idea would be to get a packet sniffer such as etherdetect which can be found here http://www.etherdetect.com/ . You can also use netstat in a command prompt to look at any connections that you have established, but your best bet would probably to use etherdetect, or to check the logs of your router/server. Once you have thier current IP address (an old one wouldn’t be good to do this with because they most likely have a dynamic IP address which means it changes every so often). Once you obtain a current IP address (within minutes of the detection) you can do a WHOIS check on it at http://www.samspade.org , which will give you the address of thier ISP. You can then contact that ISP and repor them to their abuse department. That’s about the only thing you can do about it. Also another thing you should know, is that if they are using a web proxy, you won’t be able to make a report to anyone about the abuse, but you should set your hardware firewall (if you have a router or computer set up as a server) to drop ICMP echo requests and other various forms of ping that they use. For more help on this, please reffer to another forum meant for this kind of problem at http://computercops.biz/forums.html . They are very friendly, good with internet security issues, and will be more than happy to assist you. 🙂
Just wanted to add you can goto http://www.dshield.org/ipinfo.php put the ip in the box and trace it .
Just a note not all hits on a firewall are solely directed at your pc , scans and other types of intrusions are done on a large scale Meaning a list of ip address in the hopes of finding an exploitable port or pc . having a firewall pretty much makes you pc invisable to an intruder so Its probly safe to say your not the sole target . also tracing an IP address doesnt mean that its the attacks IP he/she could and probly is using proxies and hiding his/her real IP.One more place to look up Ip address and other info is :http://www.dnsstuff.com/
- You must be logged in to reply to this topic.