Help - Search - Members - Calendar
Full Version: an over asked question lol.
B.I.S.S. Forums > Internet Security Forum > Internet Security Discussion
xmoser
212.143.25.22 has been pounding my computer for over 24 hrs now. it uses many ports 2000-20000+. it uses tcp and udp one after another. every minute or so it attacks, each ping is 2 sec apart 1-25 times in a row. there are only 4 computers alive 19-23. whats the deal with this guy?

google says he lost his wisdom teeth on March 15, 2007. who says the internet's not dangerous lol.
rzvvts
QUOTE (xmoser @ Jun 10 2008, 11:25 AM) *
212.143.25.22 has been pounding my computer for over 24 hrs now. it uses many ports 2000-20000+. it uses tcp and udp one after another. every minute or so it attacks, each ping is 2 sec apart 1-25 times in a row. there are only 4 computers alive 19-23. whats the deal with this guy?

google says he lost his wisdom teeth on March 15, 2007. who says the internet's not dangerous lol.

NOC of an Israeli ISP..Maybe antip2p. Just block the entire /24 in your firewall/ip filter
monk
QUOTE
212.143.25.22 has been pounding my computer for over 24 hrs now. it uses many ports 2000-20000+. it uses tcp and udp one after another. every minute or so it attacks, each ping is 2 sec apart 1-25 times in a row. there are only 4 computers alive 19-23. whats the deal with this guy?


These connect attempts are to a listening port you're using for a p2p program? That's very suspicious if so.

I aded this to L3.

NV-CABLES-BUSSNESS-CUST:212.143.25.0-212.143.25.255
xmoser
he finally stopped on about hour 38. he did hit p2p ports, but likely by accident. it was more of a systematic port scan of my computer but instead of scanning in a row it looked like it cut my ports up into groups and then scanned, and scanned, and scanned until he finally stopped.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.