Computing.Net > Forums > Security and Virus > Security issue - request hacker

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Security issue - request hacker

Reply to Message Icon

Name: pcnurse
Date: March 7, 2005 at 19:23:58 Pacific
OS: W98SE
CPU/Ram: 1FGhz/256
Comment:

I know this is probably not the place to ask, but I have a security issue that is NOT being resolved by my ISP (infoavenue.net). They've been notified of this issue. I'm getting TCP port scanned every 30 seconds from an IP adress within my ISP range from TCP ports 445, 135 and 1025. (probably Agobot). I notified my ISP and they haven't done a thing. I know this is probably a worm, but the atttacks are slowing me down tremendously. I've had enough. The IP address that is scanning me is: 204.116.228.179

Please, someone help me stop these attacks. Hacker requested.

I will be ever so greatful...



Sponsored Link
Ads by Google

Response Number 1
Name: OldRelic
Date: March 7, 2005 at 22:37:53 Pacific
Reply:

Hello Janet, a good anti-virus, firewall and spyware scan should stop that however how do you know it's an attack, it could just be a ping.

Does it happen at certain times or always?


MCSE Certified

Minesweeper Consultant & Solitare Expert


0

Response Number 2
Name: Mechanix2Go
Date: March 7, 2005 at 23:05:25 Pacific
Reply:

Hi Janet,

I have the same problem.

If you're in the 'first world' just tell your ISP to fix it or you'll cancel the service.

Not so clear cut out here in the boonies.

M2


0

Response Number 3
Name: j1mbo
Date: March 8, 2005 at 06:27:48 Pacific
Reply:

LINK to some info on ports - port 135 is sometimes associated with the Blaster worm, and port 1025 and port 445 sounds suspect too. Sounds like a decent router with NAT/firewall and some personal firewall and AV is required. Good luck :)

P4 LGA775 3.0GHz
2x256Mb DDR2 533MHz
XFX 6800GT PCI-E


0

Response Number 4
Name: pcnurse
Date: March 8, 2005 at 09:28:38 Pacific
Reply:

Guess what? When I woke up this morning, I noticed the scanning had finally stopped. I get port scans all the time from all over. Typically I just overlook them. But that particular one was relentless.

Thanks everyone for your input.


0

Response Number 5
Name: White Hat
Date: March 10, 2005 at 13:35:00 Pacific
Reply:

#1- A firewall will usually block scans on your system if they attempt to go any further then just a scan.You then can always say dont show this again and will not recieve the scan anymore.
#2- If you believe it is a worm then most likely the person isnt sending it to you.Most often worms have their own ability to scan for vulnerables PC's on the internet from any computer.So say someone got infected with the worm, the worm will then send more copies of itself from that PC to PC's then making you think that they are actually trying to compromise your system.


31337


0

Related Posts

See More



Response Number 6
Name: pcnurse
Date: March 22, 2005 at 21:30:39 Pacific
Reply:

Hey WhiteHat. Late entry here. That's exactly what was happening. There are some infected PC's within our ISP network. I think they're bots. The rootkits are coming to get us!! LOL. BTW, I installed a router yesterday. It's dropping everything before it gets to my PC. No ZA scans whatsoever. Hey, you using BO? Yikes! Remind me to never tick you off...LOL. Thanks for your input. I need all the help I can get.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Security issue - request hacker

Compare security issues WinNT/Linux www.computing.net/answers/security/compare-security-issues-winntlinux/9498.html

Security Issues in ATM and BISDN www.computing.net/answers/security/security-issues-in-atm-and-bisdn/2107.html

Security web sites comments www.computing.net/answers/security/security-web-sites-comments/2185.html