PDA

View Full Version : Firewall Question


PC-Shark
06-02-2002, 02:44 PM
Hi all,
I have a big problem with my firewall: he detect many attempts to enter in my PC from the same IP address; here is the question: is there a way to unable that IP to know when I'm connected? How can I know where the IP call from?

Thank u all and greetings for the forum (it's really the best)


PC-Shark http://www.PCGuide.com/ubb/wink.gif

ski
06-02-2002, 06:02 PM
If your firewall is set up properly and uses 'High Security Level' for the Internet, then your system should be adequately protected from hackers.
Did you try turning off your computer for a while to see if the probing from that IP address stops?
Try this site to trace it. Check 'Express Lookup' and type the IP address in the box: http://www.network-tools.com/

Flick
06-02-2002, 08:00 PM
Hi PC-Shark,

I use the Norton Security check. The Norton Firewall logs all potential attacks and I have my system set up to immediately display any port scans or "back door" activity. After any potential attack, I run the ISP number through Norton Security check and when it reports back, I look for an email "abuse" address for the ISP (such as "abuse@earthlink.com"). I then copy and paste the Norton log entries that describe the attempted scan into an email and send it off to ISP with the request that they investigate the activity. Every time I have done this, the port scans stop! The only problem with this system is that it only works with "honest" ISP's. ISP's in the far east and in particular China could care less. Anyhow, that's my experience. I'm sure that the many experts on this forum can provide you with better and more detailed advice. Good luck!

The Norton Security Check link is:
http://security1.norton.com/ssc/vr_main.asp?j=1&langid=us&venid=sym&plfid=20&pkj=IQLMPWFYJOKMFIDPMSV

Ghost_Hacker
06-03-2002, 09:58 AM
Can't add much to the info given above. Good links for finding the "offender" and emailing his ISP.


is there a way to unable that IP to know when I'm connected?

Not really, the scans can be an attempt to see if your online or are just part of a block of IPs being scanned. There is alot of strange internet traffic out there. Load Balancers, game servers, peer to peer programs even ISPs can all scan your computer during your internet seesions. So not every scan is someone trying to break in. However don't let't let that stop you from emailing thier "abuse" contact. http://www.PCGuide.com/ubb/smile.gif

Good Luck http://www.PCGuide.com/ubb/smile.gif

PC-Shark
06-03-2002, 02:53 PM
Hi, thank u all for the answers: they were detailed and helpful