Are the Kiddies Growing up?

Just checking firewall logs and in past 3 hrs have only had 4 port scans - still 4 too many but is it just me or is it starting to get less frequent? when i first started spending long periods of time online it seemed as if you were constantly getting scanned!

Are the kiddies finally wising up and realising its lame? Is sub7, bo2k etc dying out?

or ae they just being replaced? there seems to be a higher instance now of DDoS than there was before - are the kiddies changing from trojaning people to seeing who can collect the most zombie computers?

perhaps now with the advent of the likes of kazza making p2p file sharring easier they are too busy downloading p0rn and *shudders* good charlotte to be bothered with the lame script kiddie attacks?

has anyone else noticed this drop of in lame activity - or have I just been lucky tonight ;)

v_Ln

I think p0rn has just become more accessable to them, and they don't have as much time to be bothersome....

Nah, here's a funny think on Unerror IRC that happened. Of course, most of you know ^sWift, well, he claims that people are script kiddies for using other people's software, anyways here's the link http://www.unerror.com/forum/viewtopic.php?t=150

I have'nt had a port scan in a while besides from kazza. I dont take to kindly to port scans to begin with,Im one of the last ppl you want to port scan.
I take a port scan not as just being rude but as a threat on my life. Once I get the scan in my log I declare war.
The things that really pisses me off the most are the kiddies from oriental nations. Who know there not going to get their services taken away probably because their in a coffe shop.

(opinion)Hacking is not just limited to computers, even though the media hypes it up like that. Lets look at this for a minute, Who are Hackers? here is a few but you will get my point:
a mechanic - very knowledgable of cars.
a Doctor- knowlegde of the human body
Lawyer - knowledgable of laws
and the list goes on and on. What I am guessing the question is asking is are you a /cracker/phreaker/script kiddie?Cracker - cracks code to gain illegal access to a computer
Phreaker - manipulates the phone co. for free services
Script Kiddie - just browses the internet picking up code that someone else has written and learns to use it to possibly crack a system.

These are the total ignorant people that have no clue as to how computers operate thus ending their butts in jail(T33KiDD). oh and also the Warez Pup, I cant believe I almost forgot about them... these are the guys that pirate software...personally I really dont have much against them, only because some of these companies are charging too much for some of their software.
I just think that most of the script kiddies are on the Xbox ,ps2 ...ect...these days. Maybe the capture of T33kiDD sent a message to the kiddies.
But anyway, thats my $.02 worth

I don't think that they're growing up, you've just been lucky. I had stop Zone Alarm from doing visual alerts. ZA kept popping up so much I couldn't look at pr0n... Google kicks ass.

!mitationRust, thats the problem... it never had anything to do with computers to begin with. Its really just a bunch of random peaple looking to tag thier name on something. Weather it be source code comments, a defaced page, a message on a answering machine, & (ect). So really and truely it doesn't matter because they all share the same quests for braging rights & not to mention lameness.

Also... If browseing the web for open source software to run or edit makes you a script-kiddie then doesn't that make a large portion of linux & the open source scene in general just canon fodder of kiddies fallowing each other's path? When you read programing books do you not read the book then implement what you have learned and what is this difference between that & some Joe Blow cutting and pasteing from code snipplets off some site?

Face it... it all has nothing to do with computers. Its all about feeling "above" the other guy then looking down on him or her and yelling the word kiddie or gaining popularity and respect or 15 seconds in the news. Anyone who feels a need to label themselves hacker/cracker/phreaker or whatever in order to feel better about themselves or to fuel their interests in something probably never had a 'true' interest in technology or whatever it to begin with... oh and they should either be locked away or shot.

LOL.. 4? Where are you...? I just checked my logs.. because I have my alerts disabled.. and I have over 300 port scans 'attempts' and ping requests in the last 1 hour..

[edit]
Grammatical error...

Well at my college, before I reformated my com I was getting some big ass port scans. Kids here really don't worry about being stealthy. I used to get 1000-13000 from a single person. Now I just get my school's NETVIEW checking for p2p's.

I am totally ignorant about this sort of thing, but I am getting hits on ICMP2048 at the rate of around 1 per second?

I am getting hits on TCP2685, 445, and 135 at about 1 every 30 seconds.

Val.....................is your machine switched on :D


Sorry..............

Cheers

yup comp is on ;)

but i just seem to be getting alot less port scans than before - only 1 in the last 40mins

right enough tho the firewall is blocking like 20 inbound connection attempts every minute - but they could be anything not just kiddies :)

v_Ln

Ah got it now :duh:

15 port scans in the last 45 minutes, all from my ISP subnet and all to port 135. Is that Blaster or some sort of variant?

The rest of the hits are just connection attempts like yourself, although I seem to be getting far more of them, like 60 or more, and most of those are coming from my ISP subnet as well.

Cheers

I don't think it is as much to do with there being less l33t haxors or less people using l33t haxor tools.

I think that alot of ISPS are blocking some of the UBER L33t H4Xor Programs Ports.

I know several of the ones in your area e.g BT and Telewest do this Valhalen.

I also think that the guy with his first post being about Pron could be on to something.

Checked again,

21 hits in the last hour all to port 135 and from the ISP subnet. I am using BT Broadband, which has only been available for about 6 months around here. This is not a very high tech community, so could it be that there are more unpatched machines and people who are new to broadband?

Port 445 has not shown up so Mark probably has a point with the filtering.

I will have a bit of a giggle and log a helpdesk message with BT :D

Cheers

LMAO, Yes, Log a help desk message saying you can't get your Back Orrifice to work. I am sure that will puzzle the person who is realistically reading from a flow chart.

I think I will call and log a fault that I am trying to use port 445 and it seems to be blocked.

after reading all of this I really don't know what's wrong with me.... aside from the usual everyday traffic I've not had any nasty attempts for the last 2 months.... I feel positively left out of this ub3r 1337 attack...

Z

I was getting so many connection attempts I just disabled logging of them on tcp ports 135 445 80 1080 and 8080

Quote:

---

Originally posted here by mark_boyle2002
I don't think it is as much to do with there being less l33t haxors or less people using l33t haxor tools.

I think that alot of ISPS are blocking some of the UBER L33t H4Xor Programs Ports.

I know several of the ones in your area e.g BT and Telewest do this Valhalen.

I also think that the guy with his first post being about Pron could be on to something.

---

When I made the switch to RR things calmed down considerably, less connection attempts, etc. Then again, previous to this switch, I was on AOL, and with that, if you turn on any notification of what's going on, you might as well not even bother with surfing, because you'll constantly have firewall popups.

I'm all about the ISP filtering. Very nice when there are large e-mail virus threats as well.

Nope, things haven't calmed down at all on the skiddie front. At work it's a constant battle (or actually a constant reading of logs) from all the funny kiddies trying to run IIS attacks against Unix boxes, ahhh that never gets old ;)

My logs fill daily with scan attempts, connection attempts, and exploit attempts. 99% of the time they are nothing to bother with, they just make for fun reading material, but every now and again you get that 1% that is worrisome. Anyway, I think it is most likely the ISPs out there starting to filter a lot of the "junk" out of their consumer networks. The reason I think that is simply because my home system sees next to nothing as far as any scans/connection/exploit attempts and it's on 24x7, whereas my work network is constantly "under attack".

While reading this thread my firewall has warned of 4 connection attempts.

LOL, I can post a mountain of **** for you all to look at. I get around 2,800 external events per second, of which 10% are port scans. Just another day at the network perimeter....

:)

oh just thought i better add this for anyone reading this and thinking :::

"oh its being filtered by isp/calming down - no need to be so tight with security"

that is not so - allow i am getting very few port scans compared to what I used to a while ago I was fiddling with a spare box - nothing really on it at all and was just about to format it - but i installed modem on it and went online for like 30mins before getting a bite to eat - when i returned (like 30mins later again) I had a connection through windows file sharring - there was an exactly 0 for anyone to find but it only took 1hr for someone to gain access on what was a wide-open box
I wasn't to worried as was going to format anyways - just thought it was funny
poor kiddie peeing in his pants when he gets in only to discover that the only thing there for them to see is sol.exe - rofl

v_Ln

Hi Guys,


I finally got that reply from BT Broadband (a large UK ISP). They said that they do NOT filter or block ANYTHING!!! and that I should get myself a firewall. Why would I need one of those? I have smoke and carbon monoxide detectors in the house?.....don't they realise that it is my psychic capabilities that led me to ask them why I was getting port scans on TCP 135?

I guess that it took 36 hours whilst it went through corporate legal department and the rest:fpissed:

Cheers

Nihil, I can post you one of these. It's better than a fire wall.

LOL great protection device. Do they really work for your connection lol. Anyways back on subject. Ive had so many ping scans lately i just disabled the alerts its way to difficult to get any work done with them at the moment. So far while posting this i have gotten around 50 different connection attempts and pings. and the whole beauty of it is is that they are all coming from inside my isp's network. Beautiful eh.

PeacE
-BoB

quote from a friend

" Phreaking is a great rush but its not smart ......."

He got caught and ended up with couple years of probation and had to clean the telephone companys trucks twice a weak for 6 months.

Routers with NAT must piss off the kiddies!

oh no, don't misconstrue what I have said. I believe they are most certainly filtering stuff and not telling anyone... just look at what Road Runner got caught doing earlier this week.

Just because they are filtering (my supposition) does NOT mean you should not worry about security, nor protect yourself. I'm extremely paranoid about my connections and I monitor them all the time (it's one of the reasons I landed the job I have ;) ).