Port probes

ZA can be a bit of a pain in the arse, e.g. Playing WC3 and it pops up in the background (so you can't click on it) and preventing the socket so WC3 hangs :/

ButterflyEffect,

I take your point, but I don't think Eon will be playing that with the setup that he has at the moment. I have discussed one or two other issues with him, so I have some recollection.

I would have thought that for decent online gaming you would want ADSL/cable/satellite........at least a PIII/733MHz and at least 256Mb of RAM (he is using WinME..........XP with 512Mb would be better?)

56.6 dial-up is not that hot over here in the UK, actual d/l speeds are around 6kbps :(

I am not an online gamer, so your comments would be appreciated..........I know that it is a bit "off topic" but I suspect that Eon would also be interested for future reference, as it involves the interaction with firewalls and AV?

What AV/Firewall combo do you gamers prefer? Do you use the same one all the time, or just switch for gaming?

Cheers

Yeah don't worry about going off topic, i'm fine with it. I just did it in the zombie thread so i'm good.

How do i get broadband then and how much will that cost?

Ok seeing as we're going off topic i'll ask these aswell, and then i should be fine to gather all of the stuff i've collected so far and spend the rest of this year reading it all. (i've even started collecting links to threads on this site and am collecting and saving them in wordpad.)

1. Proxy, is this better for me or not?

2. I've read quite a bit about having a changing instead of a static IP address. How do i do this and would this make my PC more secure? Oh, i've just been told that it's already changing by my stepdad. Is this right?

3. Last one, i've been looking at javascript for a while now because it seems to be added into webpages on the net a lot, when i view the source code for pages, but can anyone tell me, in what is hopefully the last question for a good while, why it's included so much in websites and how it could benefit me in making my own site in my hosting account? (i've been looking at it and loads of the things that i can put in pages are already in HTML)

..........phew.


Seriously, i think i'm gonna have to spend a long time reading very shortly. I've just got my Dev C++ to compile the hello world program so i'm trying to learn C++ aswell, along with HTML table layouts for webpages and Javascript. (i want to get into web-design at the moment and am shortly starting a Design IT course.)

Hi Eon,

PM me with your UK location (general, like county/nearest big town...not specific...be safe!) and I will advise you on your Broadband options........out in sticksville, East Yorkshire Coast, I have the option of BT, BT or BT..........but I think that ntl will be a player at the end of April..........we have no cable as yet, and satellite is expensive to set up independently................it has got as far as Driffield on shared services basis.

You are looking at around £30 per month 24 hours availability................you might be able to get a deal that ties it in with cable TV/satellite TV/Telephone, so you actually save money...............that sort of deal has actually saved me over £400 per year because of the discounted telephone element. Like I pay a fixed amount, but there are no phone bills except for exotic foreign stuff?

I am talking 256ul/512dl ADSL here, by the way.

Sorry to sound boring, but you need to look at your family requirements.........they (Telcos) won't help you save paying them money ;) You can actually end up with a better service for less money!!!!!!!!!!!!!!!!!!

1. Proxy..................not sure why you would want it?
2. Your stepdad is correct, dial up and most UK ADSL are dynamic IP addresses within an address block assigned to your ISP.
3. If you are using Java with WinME you must get the latest security updates from Microsoft, or go to the Sun replacement........otherwise you are vulnerable to the byteverifyer (bitveryfier?) trojan exploits. Hint: it may not work if you have updated other things in the meantime, so run the update again after re-booting, and see if it is still there?

Cheers

Eon, would it be possible to post some of your logs? I'm trying to find out where those probes are dialing and where they're coming from. There's been quite an increase in number of members who believe they've been hacked or that their computer is sending packets outbound. There's a hot issue right now about zombies attacking the merijin site and DDOSing it constantly. Any help would be greatly appreciated.


nihil, join AOs counter-strike clan :)...you'll have some fun


Here's some update on the issue:

February 24, 2004:
The DDoS attack is continuing. If you can read this, there's a small gap in the attack or it's over. Either way, until the attack is over, the update function in CWShredder or HijackThis will not work.

By the way, we often point the DDoS'ed domains to 127.0.0.1, which makes the bots attack themselves. You can still reach us by adding 216.40.225.12 www.merijn.org and 209.133.47.19 www.spywareinfo.com in your hosts file. If you don't know what that means, ignore this block of text. :)

Sup Ice. Hows your clan doing? Oh yah, on topic the logs would help more-ish. Nihil knows tons so he can help you immensly. BTW, don't you UK-landers have cable or dsl?

-Cheers-

well we lost another match last night, but we seem to be getting better :).

Nihil i live in Hull but i share this computer with my brother and he's already paying out quite a bit.....haha, he's just said it's an extra 10 pound a month (i have a screwed keyboard that gives # instead of a poundsign) so i think we'll be getting it.

Cybr1d i'll post my logs on here shortly, is that ok to just post all of the IP addresses on here with the info next to them? Dunno why i'm even asking that, i'll start writing them down and post back.

These are just a few from my firewall logs, if you want more i'll add more crazy looking ones that appear later. :



MSRPC TCP port probe 213.249.223.83
TCP port probe user-0cdv739.cable.mindspring.com
HTTP port probe DFU-SERV
TCP port probe pn125.internetdsl.tpnet.pl
MSRPC TCP port probe adsl-213-249-248-144.karoo.KCOM.COM (think this is my PC)
TCP port probe TEMPWEB
TCP port probe 202.134.188.21 (count of 90)
TPC port probe adsl-65-70-78-119.dsl.tulsok.swbell.net
TCP port probe c118107.upc-c.chello.nl
UDP port probe ppp-80-47-205-35.lns.access.uk.tiscali.com
HTTP port probe 61-221-109-155.HINET-IP.hinet.net
SOCKS port probe pool-138-89-110-2.mad.east.verizon.net
Suspicious URL Event 64.235.246.120
NetBIOS port probe FUZZY8
NetBIOS port probe PROMETRIC
TCP port probe 3e70dbea.adsl.enternet.hu (count of 86)

If you want me to give you the actual logs, i'm having a problem finding and opening them, i'll have to get back to you, this was set out better in wordpad but it didn't translate to the post.

Thank you very much:


pool-138-89-110-2.mad.east.verizon.net

Its server seems to be in New York and If i'm correct, the client should be close by. Is this connection dialing out? If this happens to be one of the zombies, i dont think i'd be able to go all the way to new york with my current $$ :). I live in boston.

As for TCP port probe 3e70dbea.adsl.enternet.hu (count of 86) do you actually mean this shows 86 times?

Now, I would recommend you go to http://www.glocksoft.com and download the trial version of Advanced Administrative Tools. THere's a feature in this tool to monitor your network and see whats going on. Perhaps it could help us out even more if you show us some logs from it.


If your computer is a zombie, it will show what program is dialing out and to what IP. We would be able to get a specimen of the zombie that way and work from there.


THank you so much for your help, i really appreciate it.