dalu Posted March 9, 2006 Share Posted March 9, 2006 :smt013 :smt076 :smt087 :smt097 :smt068 . Nu stiu ce se intampla , ca de cateva zile , sant victima unor tentative esuate de hack-ing. Cel putin asa ma informeaza Kaspersky-antihacker. Stiu ca nu-i in spiritul site-ului ceea ce eu vreau sa va cer, dar totusi.............avand IP-urile de unde au incercat criminalii aia sa-mi faca necaz, eu nu a-si putea sa le fac eu la randul meu, ceva probleme , sau macar sa vada ca sant constient de activitatea lor infractionala, si sa ma lase draq in pace? Atasez mai jos o lista cu IP-urile care nu au avut loc de mine: ........................................................................................................ 3/8/2006 10:09:47 AM Your computer has been attacked from 61.136.144.100. Attack - Helkern. The attack has been successfully repulsed. ...................................................................................................... 3/8/2006 10:45:48 AM Your computer has been attacked from 61.139.54.94. Attack - Helkern. The attack has been successfully repulsed. ..................................................................................................... 3/8/2006 12:05:09 PM Your computer has been attacked from i60-46-175-157.s05.a010.ap.plala.or.jp. Attack - Helkern. The attack has been successfully repulsed. ..................................................................................................... 3/9/2006 10:50:07 AM Your computer has been attacked from 219.146.180.131. Attack - Helkern. The attack has been successfully repulsed. ....................................................................................................... 3/9/2006 2:58:56 PM Your computer has been attacked from http://WWW.ARS-ASP.COM.48.70.186.221.in-addr.arpa. Attack - Helkern. The attack has been successfully repulsed. .................................................................................................... 3/9/2006 6:25:48 PM Your computer has been attacked from 202.107.194.230. Attack - Helkern. The attack has been successfully repulsed. ......................................................................................................... 3/9/2006 7:09:52 PM Your computer has been attacked from 221.235.112.94. Attack - Helkern. The attack has been successfully repulsed. .......................................................................................................... 3/9/2006 8:15:13 PM Your computer has been attacked from 61.153.15.163. Attack - Helkern. The attack has been successfully repulsed. ......................................................................................................... Link to comment
Mircea Bartic Posted March 9, 2006 Share Posted March 9, 2006 nu prea poti sa-i gasestimai mult ca sigur atacurile au fost pornite prin niste zombie sau printr-un proxy, asa ca ip-ul nu are nici o valoare pt ca este fals Link to comment
Guest Posted March 9, 2006 Share Posted March 9, 2006 dear om,alde hackerii nu se ocupa cu chestii de astea ieftine. Asa ca, fara sa ma documentez prea mult, pot spune ca nu a fost (este) un atac intentionat. De obicei sunt scanate zeci de mii de calcaulatoare, iar procedura este automatizata. Daca antihacker-ul tau a blocat atacul, nu trebuie sa-ti mai pese. Sincer, stiu oameni care au dat in paranoia, pe ei tot timpul ii ataca cineva, etc. Si, crede-ma, am ceva experienta in treburile astea. De 10 ani tot administrez retele conectate sau nu la internet. Daca e treaba interesanta pentru tine, am o solutie simpla pentru asta si in plus scapi de toate programele pe care le tot instalezi pe PC-ul tau: se ia un pentium la 75-133 MHz, se pun doua placi de retea, un HDD de 100 MB (mega nu giga, adica cam a sasea parte dintr-un CD-ROM), un FreeBSD (aka UNIX), se pune in debara si uiti. Si de el si de hackeri. N-are nevoie de monitor, eventual nici de tastatura. Inconveniet? Unul singur...energia electrica. Link to comment
pisoiu Posted March 9, 2006 Share Posted March 9, 2006 E posibil ca tipii de la IP-urile care dau in tine sa nici nu aiba habar ce se intampla. Pot sa fie si ei infectati, si sa nu stie ca fac rau la altii./pisoiuedited: nanopico fu' mai rapid... Link to comment
Guest Navajo Posted March 9, 2006 Share Posted March 9, 2006 Daca esti intr-o retea atunci sunt virusi si viermi backdoor care incearca sa intre in toate calculatoarele,iar cei care au IP-urile alea habar n-au. Link to comment
dalu Posted March 9, 2006 Author Share Posted March 9, 2006 Daca esti intr-o retea atunci sunt virusi si viermi backdoor care incearca sa intre in toate calculatoarele,iar cei care au IP-urile alea habar n-au. Nu sant intr-o retea, iar net-ul il am de la RDS. :smt017 :smt102 Link to comment
dalu Posted March 9, 2006 Author Share Posted March 9, 2006 dear om,alde hackerii nu se ocupa cu chestii de astea ieftine. Asa ca, fara sa ma documentez prea mult, pot spune ca nu a fost (este) un atac intentionat. De obicei sunt scanate zeci de mii de calcaulatoare, iar procedura este automatizata. Daca antihacker-ul tau a blocat atacul, nu trebuie sa-ti mai pese. Sincer, stiu oameni care au dat in paranoia, pe ei tot timpul ii ataca cineva, etc. Si, crede-ma, am ceva experienta in treburile astea. De 10 ani tot administrez retele conectate sau nu la internet. Daca e treaba interesanta pentru tine, am o solutie simpla pentru asta si in plus scapi de toate programele pe care le tot instalezi pe PC-ul tau: se ia un pentium la 75-133 MHz, se pun doua placi de retea, un HDD de 100 MB (mega nu giga, adica cam a sasea parte dintr-un CD-ROM), un FreeBSD (aka UNIX), se pune in debara si uiti. Si de el si de hackeri. N-are nevoie de monitor, eventual nici de tastatura. Inconveniet? Unul singur...energia electrica. ......dar Firewall-ul hardware , de pe placile de baza echipate cu nForce 4 Ultra, nu-i o solutie buna?? :smt017 :smt102 :smt017 :smt102 Link to comment
Guest mister_rf Posted March 9, 2006 Share Posted March 9, 2006 :smt003 atacurile provin din China... inetnum: 61.136.128.0 - 61.136.255.255 netname: CHINANET-HB descr: CHINANET Hubei province network descr: Data Communication Division descr: China Telecom country: CN admin-c: CH93-AP tech-c: CHA1-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-CHINANET mnt-lower: MAINT-CN-CHINANET-HB source: APNIC # Filtered role: CHINANET HB ADMIN address: 8th floor of JinGuang Building address: #232 of Macao Road address: HanKou Wuhan Hubei Province address: P.R.China country: CN phone: +86 27 82862199 fax-no: +86 27 82861499 e-mail: [email protected] remarks: trouble: send spam reports to [email protected] remarks: trouble: and abuse reports to [email protected] remarks: trouble: Please include detailed information and remarks: trouble: times in GMT+8 admin-c: YZ83-AP admin-c: ZC77-AP tech-c: YZ83-AP tech-c: ZC77-AP nic-hdl: CHA1-AP mnt-by: MAINT-CN-CHINANET-HB source: APNIC # Filtered person: Chinanet Hostmaster nic-hdl: CH93-AP e-mail: [email protected] address: No.31 ,jingrong street,beijing address: 100032 phone: +86-10-58501724 fax-no: +86-10-58501724 country: CN mnt-by: MAINT-CHINANET source: APNIC # Filtered inetnum: 219.146.0.0 - 219.147.31.255 netname: CHINATELECOM-sd descr: CHINANET shandong province network descr: China Telecom descr: No.31,jingrong street descr: Beijing 100032 country: CN admin-c: CH93-AP tech-c: WG1-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-CHINANET mnt-lower: MAINT-CHINATELECOM-sd source: APNIC # Filtered person: Chinanet Hostmaster nic-hdl: CH93-AP e-mail: [email protected] address: No.31 ,jingrong street,beijing address: 100032 phone: +86-10-58501724 fax-no: +86-10-58501724 country: CN mnt-by: MAINT-CHINANET source: APNIC # Filtered person: wang guang address: NO.71 JINGSI ROAD JINAN SHANDONG PRONVICE country: CN phone: +86-531-3198182 fax-no: +86-531-3198193 e-mail: [email protected] nic-hdl: WG1-AP mnt-by: MAINT-CHINATELECOM-SD source: APNIC # Filtered Link to comment
dalu Posted March 9, 2006 Author Share Posted March 9, 2006 :king: :salute: . FORMIDABIL mister_rf, esti intr-adevar mare!!! Toata stima! :salute: :salute: :salute: . Cum reusesti treaba asta? Apropo, intreb asa mai mult retoric, a-si avea vreo posibilitate sa-i ,,faultez" pe indivizi? :smt003 :smt003 Link to comment
Guest mister_rf Posted March 9, 2006 Share Posted March 9, 2006 Nu este greu sa verifici un IP cautand aici: http://ripe.net/fcgi-bin/whois?form_typ ... ced+search Si adresele sunt ale serverelor infectate cu ''Helkern''... Link to comment
pavcostel Posted March 9, 2006 Share Posted March 9, 2006 Sorry, dar solutia spusa de Nanopico cred ca e cea mai valabila. E drept ca se poate pune si CentOs, sau orice Linux server. CU FIREWALL, ca altfel esti in fundul gol... Rds din cate stiu mai e rutat din cand in cand si prin ro-edu.net, care are ban sau ma rog, acces restrictionat pe Muulte porturi si servere. Unele servere pur si simplu i-l resping.(pe ro-edu) Zic si eu...Cu stima,Costel Link to comment
costy Posted March 10, 2006 Share Posted March 10, 2006 si la mine se intampla chestia asta zilnic de n ori,n-are rost sa te strofoci(nu e un atac personal) Link to comment
dalu Posted March 10, 2006 Author Share Posted March 10, 2006 si la mine se intampla chestia asta zilnic de n ori,n-are rost sa te strofoci(nu e un atac personal) ....ba ma strofoc , mai frate @costy, si sa-ti spun si de ce: Eu sant adeptul teoriei cum ca proprietatea privata-i sfanta, i-mi intra un intrus in casa fara permisiunea mea <>( vezi cazul Iovan), ori hardul unui calculator cu informatia de pe el , face parte din intimitatea mea , din viata mea privata , pe care , daca cineva incearca sa o violeze, incerc sa ripostez cat mai violent cu putinta. Nu am incercat sa ma bag in HDD-ul nimanui, nu tolerez ca cineva sa il acceseze pe al meu. Nici macar tentativa nu o concep. Eu vad chestiile astea ca un furt calificat ( sau tentativa) din buzunar, in aglomeratie in troleibuz. :smt067 :smt068 :smt071 :smt027 Link to comment
unGuru Posted March 10, 2006 Share Posted March 10, 2006 @dalu364, te agiti degeaba (prieteneste vorbind).. chestiile astea au devenit la fel de comune precum popup-urile sexy de pe site-urile de warez ;)Ti s-a explicat mai sus ca multe dintre aceste "atacuri" sint neintentionate (in necunostinta de cauza) si se datoreaza unor virusi activi pe respectivele PC-uri.. iar daca este opera vreunui "hacker", fii sigur ca are minimum de cunostinte incit sa-si ascunda urma.Singura metoda de aparare este un firewall + antivirus actualizat la zi.. Link to comment
Tavi Posted March 10, 2006 Share Posted March 10, 2006 schimba-ti firewall-ul , nu te ataca nimeni de fapt Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now