October 18th, 2003, 06:38 PM
Don't forget that sometimes network devices actually create traffic that may match rules in your firewall. If a rule matches an alarm goes off.
October 18th, 2003, 07:51 PM
Looking at the logs, the address has used a portscan attack twice last night, twice this morning. I bet this guy got to work last night, went to bed, and got back to work this mornin. I doubt its any kind of worm or virii or whatever because they dont get sleepy like mr hacker.
Same address exactly, i talked got my friends IP's that live on the same floor, and our addresses our ###.###.###.### with the last 3 digits being within 30 of eachother. The hacker is 27 greater than mine.
October 18th, 2003, 07:52 PM
Thanks for the advice but here's my ip: 220.127.116.11
Originally posted here by MsMittens
And I'd like to add some other advice:
Please do not publish IP addresses of yourself or those who are bothering you as not everyone that visits AO is ...errr.. shall we say ethical?
Nibble, nibble, mousekin,
Who's nibbling at my housekin?
October 18th, 2003, 09:27 PM
I am sorry to have to say this, but there "is a rat in the granary" so to speak
I just had to logically eliminate the "noise" that might be created by the remnant infections of recent worms?
I would now go to the sysadmins with your logs..........