|
-
May 16th, 2003, 03:11 PM
#11
Now i been getting hacked by the same ip range for a week now
As other posters have noted, those IP addresses you mentioned were not in the same IP range. I assume you are getting this impression of being hacked from your firewall logs. Go and read my thread here
http://www.antionline.com/showthread...hreadid=236583
And then try to work out if you're getting real attacks.
Bear in mind that at least 90% of malicious traffic comes from "zombie" machines infected by worms, so it is highly unlikely there are any skript kiddies behind it. In most IDS installations, it's necessary to filter this traffic out because otherwise it swamps logs of non-worm attacks.
Nearly all the owners of these zombie machines will be oblivious to the fact that their boxes are infected, so go easy on them (and DO NOT DoS them or you could end up in court)
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|