I've been hit!

[sysmin770]

rmcgoo,

Don't forget that sometimes network devices actually create traffic that may match rules in your firewall. If a rule matches an alarm goes off.

[rmcgoo]

Looking at the logs, the address has used a portscan attack twice last night, twice this morning. I bet this guy got to work last night, went to bed, and got back to work this mornin. I doubt its any kind of worm or virii or whatever because they dont get sleepy like mr hacker.
Nihil-
Same address exactly, i talked got my friends IP's that live on the same floor, and our addresses our ###.###.###.### with the last 3 digits being within 30 of eachother. The hacker is 27 greater than mine.

[puerco]

Originally posted here by MsMittens
And I'd like to add some other advice:

Please do not publish IP addresses of yourself or those who are bothering you as not everyone that visits AO is ...errr.. shall we say ethical?

Thanks for the advice but here's my ip: 62.131.220.214

Nibble, nibble, mousekin,
Who's nibbling at my housekin?

[nihil]

Thanks rmcgoo,

I am sorry to have to say this, but there "is a rat in the granary" so to speak

I just had to logically eliminate the "noise" that might be created by the remnant infections of recent worms?

I would now go to the sysadmins with your logs..........

Good luck