Jump to content
BulForum.com

Кой се прави на хакер?


break

Recommended Posts

Понеже вече за трети път ми се случва за 6 месеца, реших да отворя тази тема. Някой се опитва да се прави на хакер и антивирусната на два пъти ми показа днес, че е блокирал достъпа до моя компютър от IP адрес 212.104.110.219 а това е адрес от евроком. Това го проверих от тук. А ето какво ми изписа нортъна:

"Default Block DeepThroat Trojan horse" blocked (212.***.***.***)
(намерихме се с човека)

Предлагам, ако има и други такива (вярвам, че има) да им пишем IP-тата им тук. Все пак от един град сме, от една мрежа. Ако тръгваме да се прецакваме един друг. Пробвайте се върху някой софианец примерно. :)

Link to comment
Share on other sites

А що си мислиш, че някой го прави съзнателно а не е някой вирус или червей

Link to comment
Share on other sites

Моя Нортън също постоянно ми съобщава за такива атаки. И все от различни IP-та, но само Еврокомски. Предполагам че това са някакви вируси... Ето някой от тях, не ги записвам всичките щото ми омръзва:

217.10.242.139

84.252.44.25 (има и на Гигабит)

217.10.252.56

84.252.45.192

217.10.242.71

217.20.242.49

217.10.252.25

217.10.252.76

217.10.255.43

217.10.252.214

217.10.255.139

217.10.242.131

217.10.255.7

212.104.116.57

84.252.42.80.

Link to comment
Share on other sites

Виж за червеи не съм се досетил. Но нортъна ми изписва, че е Trojan horse.

Link to comment
Share on other sites

az si hakerstvam ama ne v na6ta mreja na drugi hora ot evrocom ne praa mizerii pak i pri mene sas 2 firewalla i kaspersky ne mi prai nikvi problemi

EDIT: eto moite ataki koito sa s opitali da nanesat

28.11.2004 г. 16:02:55  Your computer has been attacked from 221.215.99.180. Attack - Helkern. The attack has been successfully repulsed.
28.11.2004 г. 19:21:43  Your computer has been attacked from 219.120.98.35. Attack - Helkern. The attack has been successfully repulsed.
28.11.2004 г. 21:00:22  Your computer has been attacked from 82.42.2.251. Attack - Helkern. The attack has been successfully repulsed.
29.11.2004 г. 15:15:25  Your computer has been attacked from ppp-61.90.26.166.revip.asianet.co.th. Attack - Helkern. The attack has been successfully repulsed.
29.11.2004 г. 17:19:50  Your computer has been attacked from 221.124.192.113. Attack - Helkern. The attack has been successfully repulsed.
29.11.2004 г. 18:06:05  Your computer has been attacked. Attack - Land. The attack has been successfully repulsed.
30.11.2004 г. 13:34:25  Your computer has been attacked from 65.19.169.197. Attack - Helkern. The attack has been successfully repulsed.
30.11.2004 г. 14:26:35  Your computer has been attacked from c-67-170-50-176.client.comcast.net. Attack - Helkern. The attack has been successfully repulsed.
30.11.2004 г. 14:36:58  Your computer has been attacked from rosny-2-82-67-227-21.fbx.proxad.net. Attack - Helkern. The attack has been successfully repulsed.
30.11.2004 г. 16:55:31  Your computer has been attacked from 82.154.197.191. Attack - Helkern. The attack has been successfully repulsed.
01.12.2004 г. 14:29:55  Your computer has been attacked from 221.127.181.203. Attack - Helkern. The attack has been successfully repulsed.
01.12.2004 г. 15:32:45  Your computer has been attacked from 218.190.47.48. Attack - Helkern. The attack has been successfully repulsed.
01.12.2004 г. 16:11:35  Your computer has been attacked from 65.19.169.197. Attack - Helkern. The attack has been successfully repulsed.
01.12.2004 г. 21:51:47  Your computer has been attacked from zaqdadc5af3.zaq.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
02.12.2004 г. 15:50:23  Your computer has been attacked from ACB7DFE2.ipt.aol.com. Attack - Helkern. The attack has been successfully repulsed.
02.12.2004 г. 19:08:52  Your computer has been attacked from 221.215.6.110. Attack - Helkern. The attack has been successfully repulsed.
03.12.2004 г. 14:29:35  Your computer has been attacked from 61.134.45.2. Attack - Helkern. The attack has been successfully repulsed.
03.12.2004 г. 15:02:57  Your computer has been attacked from static-68-163-73-135.res.east.verizon.net. Attack - Helkern. The attack has been successfully repulsed.
03.12.2004 г. 15:17:46  Your computer has been attacked. Attack - DDoS (denied servicing). The attack has been successfully repulsed.
03.12.2004 г. 15:52:32  Your computer has been attacked from user-38ld0ai.dialup.mindspring.com. Attack - Helkern. The attack has been successfully repulsed.
03.12.2004 г. 19:26:35  Your computer has been attacked from 1Cust23.tnt3.cleveland3.oh.da.uu.net. Attack - Helkern. The attack has been successfully repulsed.
04.12.2004 г. 07:04:06  Your computer has been attacked from c12-rba-3.dial-up.net. Attack - Helkern. The attack has been successfully repulsed.
04.12.2004 г. 09:48:21  Your computer has been attacked from 221.127.13.45. Attack - Helkern. The attack has been successfully repulsed.
04.12.2004 г. 11:08:48  Your computer has been attacked from 24-116-163-209.cpe.cableone.net. Attack - Helkern. The attack has been successfully repulsed.
05.12.2004 г. 22:11:46  Your computer has been attacked from fiber-48.myst.evro.net. Attack - Scanning TCP ports. The attack has been successfully repulsed.
05.12.2004 г. 22:12:47  Your computer has been attacked from c213-100-56-207.swipnet.se. Attack - Helkern. The attack has been successfully repulsed.
06.12.2004 г. 22:22:21  Your computer has been attacked from host81-129-199-159.range81-129.btcentralplus.com. Attack - Helkern. The attack has been successfully repulsed.
07.12.2004 г. 14:30:09  Your computer has been attacked from unknown.interbgc.com. Attack - Scanning TCP ports. The attack has been successfully repulsed.
07.12.2004 г. 17:59:56  Your computer has been attacked from adslsapo-b5-131-191.telepac.pt. Attack - Helkern. The attack has been successfully repulsed.
08.12.2004 г. 15:04:40  Your computer has been attacked from unknown.interbgc.com. Attack - Scanning TCP ports. The attack has been successfully repulsed.
08.12.2004 г. 15:15:52  Your computer has been attacked from 195.219.163.222. Attack - Helkern. The attack has been successfully repulsed.
08.12.2004 г. 20:04:18  Your computer has been attacked from L1440P02.dipool.highway.telekom.at. Attack - Helkern. The attack has been successfully repulsed.
08.12.2004 г. 20:41:11  Your computer has been attacked from 218.58.58.12. Attack - Helkern. The attack has been successfully repulsed.
08.12.2004 г. 22:21:18  Your computer has been attacked from 218.31.79.197. Attack - Helkern. The attack has been successfully repulsed.
09.12.2004 г. 20:33:05  Your computer has been attacked from U166219.ppp.dion.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
10.12.2004 г. 03:11:20  Your computer has been attacked from 61.159.23.25. Attack - Helkern. The attack has been successfully repulsed.
11.12.2004 г. 20:07:56  Your computer has been attacked from 18.72.broadband2.iol.cz. Attack - Helkern. The attack has been successfully repulsed.
12.12.2004 г. 13:13:06  Your computer has been attacked from 218.31.79.197. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 14:47:59  Your computer has been attacked from 61.159.15.2. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 16:06:16  Your computer has been attacked from 62.150.61.20. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 18:06:25  Your computer has been attacked from 218.27.16.130. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 23:01:07  Your computer has been attacked from 61.185.21.221. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 23:01:23  Your computer has been attacked from 202.99.177.207. Attack - Helkern. The attack has been successfully repulsed.
26.3.2005 г. 23:54:49  Your computer has been attacked from 66.78.4.2. Attack - Helkern. The attack has been successfully repulsed.
27.3.2005 г. 09:32:32  Your computer has been attacked from 202.99.177.207. Attack - Helkern. The attack has been successfully repulsed.
27.3.2005 г. 12:04:16  Your computer has been attacked from p1017-ipbf08kamokounan.kagoshima.ocn.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
27.3.2005 г. 15:02:56  Your computer has been attacked from palesterxp.uncg.edu. Attack - Helkern. The attack has been successfully repulsed.
27.3.2005 г. 17:04:11  Your computer has been attacked from 66.78.4.2. Attack - Helkern. The attack has been successfully repulsed.
29.3.2005 г. 19:55:50  Your computer has been attacked from 209.164.15.180.ptr.us.xo.net. Attack - Helkern. The attack has been successfully repulsed.
29.3.2005 г. 21:02:51  Your computer has been attacked from 61.134.56.4. Attack - Helkern. The attack has been successfully repulsed.
30.3.2005 г. 13:15:55  Your computer has been attacked from c-24-14-141-220.client.comcast.net. Attack - Helkern. The attack has been successfully repulsed.
30.3.2005 г. 15:48:17  Your computer has been attacked from 61.159.15.2. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 01:31:45  Your computer has been attacked from 66.78.4.2. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 03:08:10  Your computer has been attacked from 61.185.21.221. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 03:36:11  Your computer has been attacked from 61.185.28.105. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 06:54:21  Your computer has been attacked from 60.2.19.44. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 09:27:10  Your computer has been attacked from 202.97.174.226. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 17:47:45  Your computer has been attacked from 61.185.8.16. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 20:52:10  Your computer has been attacked from 61.134.56.4. Attack - Helkern. The attack has been successfully repulsed.
31.3.2005 г. 22:42:46  Your computer has been attacked from ACAE8EAD.ipt.aol.com. Attack - Helkern. The attack has been successfully repulsed.
01.4.2005 г. 03:07:03  Your computer has been attacked from ZF234133.ppp.dion.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
01.4.2005 г. 11:36:35  Your computer has been attacked from dhcp125.nccrpc.pccu.edu.tw. Attack - Helkern. The attack has been successfully repulsed.
01.4.2005 г. 17:53:08  Your computer has been attacked from 66.78.4.2. Attack - Helkern. The attack has been successfully repulsed.
01.4.2005 г. 20:43:14  Your computer has been attacked from pcp0010086641pcs.eatntn01.nj.comcast.net. Attack - Helkern. The attack has been successfully repulsed.
02.4.2005 г. 02:58:19  Your computer has been attacked from 221.127.177.123. Attack - Helkern. The attack has been successfully repulsed.
02.4.2005 г. 09:20:31  Your computer has been attacked from 61.185.8.16. Attack - Helkern. The attack has been successfully repulsed.
02.4.2005 г. 18:22:02  Your computer has been attacked from 61.134.56.4. Attack - Helkern. The attack has been successfully repulsed.
02.4.2005 г. 23:43:25  Your computer has been attacked from 61.159.15.2. Attack - Helkern. The attack has been successfully repulsed.
03.4.2005 г. 11:44:02  Your computer has been attacked from 61.159.15.2. Attack - Helkern. The attack has been successfully repulsed.
03.4.2005 г. 21:08:49  Your computer has been attacked from 209.164.15.180.ptr.us.xo.net. Attack - Helkern. The attack has been successfully repulsed.
03.4.2005 г. 22:41:27  Your computer has been attacked from pcp04044379pcs.walngs01.pa.comcast.net. Attack - Helkern. The attack has been successfully repulsed.
04.4.2005 г. 14:02:41  Your computer has been attacked from 64.19.69.75. Attack - Helkern. The attack has been successfully repulsed.
04.4.2005 г. 15:05:35  Your computer has been attacked from 200227236024-dial-user-ECP.acessonet.com.br. Attack - Helkern. The attack has been successfully repulsed.
04.4.2005 г. 16:18:02  Your computer has been attacked from ppp92-101.larissa.access.acn.gr. Attack - Helkern. The attack has been successfully repulsed.
04.4.2005 г. 21:49:37  Your computer has been attacked from 61.159.15.2. Attack - Helkern. The attack has been successfully repulsed.
05.4.2005 г. 11:08:18  Your computer has been attacked from 218.98.32.233. Attack - Helkern. The attack has been successfully repulsed.
05.4.2005 г. 22:30:37  Your computer has been attacked from 61.185.8.16. Attack - Helkern. The attack has been successfully repulsed.
07.4.2005 г. 22:43:16  Your computer has been attacked from 219.150.161.16. Attack - Helkern. The attack has been successfully repulsed.
07.4.2005 г. 23:11:20  Your computer has been attacked from fia40-99.dsl.hccnet.nl. Attack - Helkern. The attack has been successfully repulsed.
08.4.2005 г. 10:58:14  Your computer has been attacked from 61.128.109.216. Attack - Helkern. The attack has been successfully repulsed.
08.4.2005 г. 23:10:22  Your computer has been attacked from ACA09FA0.ipt.aol.com. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 05:55:51  Your computer has been attacked from 202.97.174.226. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 07:07:14  Your computer has been attacked from cncln.online.ln.cn. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 10:47:00  Your computer has been attacked from p4219-ipbf05souka.saitama.ocn.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 12:15:57  Your computer has been attacked from 218.202.185.113. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 14:23:24  Your computer has been attacked from pcp0010723219pcs.union01.nj.comcast.net. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 15:51:09  Your computer has been attacked from 221.127.17.101. Attack - Helkern. The attack has been successfully repulsed.
09.4.2005 г. 20:31:09  Your computer has been attacked from cncln.online.ln.cn. Attack - Helkern. The attack has been successfully repulsed.
10.4.2005 г. 13:17:58  Your computer has been attacked from 61.182.202.67. Attack - Helkern. The attack has been successfully repulsed.
10.4.2005 г. 16:28:00  Your computer has been attacked. Attack - DDoS (denied servicing). The attack has been successfully repulsed.
10.4.2005 г. 18:08:58  Your computer has been attacked from pm13.zenon.net. Attack - Scanning TCP ports. The attack has been successfully repulsed.

Link to comment
Share on other sites

И на мен почти всеки ден ZoneAlarm-a ми показва някви IP-та, които се опитват да ме хакнат и доста често са еврокомски. Ама до сега не съм си правил труда да ги записвам B) .

Link to comment
Share on other sites

Аз IRC не ползвам. Само ICQ или Yahoo Messenger. И тях ги ползвам от 2 месеца.

Link to comment
Share on other sites

Аве кво пак сте се шашнали от тея глупости, не знам, колко пъти вече се е писало, че това си е нормален интернет 'шум', че антивирусните ви програми (по-скоро файруолите, антивирусите имат друга работа) приемат за атака всичко (например за да Ви убедят създателите й колко много неща хваща и колко е добра). От друга страна файроулите не са перфектни, понякога 'лъжат' за това което за 'хванали'.

Без съмнение постоянно има опити на ботове да се ръгнат тук и там, но това са случайни величини, както едно време в разгара на Бластер-а, който месеци след това 'опипваше' наоколо.

Мен как не ми пищат стените не знам, ами защото съм настроил да си вършат работата, да логват, и да не ме уведомяват за нищо, освен в най-сериозните случаи, което никога не е ставало, т.е. от повече от година не съм й виждал мутрата на файруолната ми програма.

Link to comment
Share on other sites

Спокойно....в повечето случаи това са автоматизирани програми, сканиращи за отворени портове. Още в началото като се вързах на Евроком ми направи впечатление, че Нортънската стена през 3-4 минути ми съобщава за опити за сканиране от адреси вътре в Евроком(обикновено няколко едни и същи), но не ме откриват, не само че са ми затворени нужните портове, но и съм invisible за сканиращия (или програмата). Затова си изключих предупрежденията за всяко сканиране и оставих само тези за по-сериозните проблеми. :)

Link to comment
Share on other sites

Понеже вече за трети път ми се случва за 6 месеца, реших да отворя тази тема. Някой се опитва да се прави на хакер и антивирусната на два пъти ми показа днес, че е блокирал достъпа до моя компютър от IP адрес 212.104.110.219 а това е адрес от евроком. Това го проверих от тук. А ето какво ми изписа нортъна:

:angry1

Не че не си обновявавм редовно антивирусната, ама ми писна някой да си играе с IP-тата на хората. Дайте някой съвет как да проверя на кой е това IP или някой който разбира да му даде малко зор, да не се е..ва за напред.

 

Предлагам, ако има и други такива (вярвам, че има) да им пишем IP-тата им тук. Все пак от един град сме, от една мрежа. Ако тръгваме да се прецакваме един друг. Пробвайте се върху някой софианец примерно. :)

 

абе майка му стара аз дето хабер си нямам от хакерстване като цъкнах на тоя линк горе дето си го дал в инфото пише мойто скапано IP!!!!!

 

Какво по дяволите :angry1 става тука?

___________________________________

@breckneck: аха, ясно

Link to comment
Share on other sites

Дава ти информация за твоя компютър. Ако аз цъкна там ще ми даде информация за моя компютър. Спокойно друг никой не го вижда твоето. :)

А горе в дясно като напишеш някакъв валиден IP адрес ти показва неговата информация.

Link to comment
Share on other sites

Не че ми пука, че някой ше ми направи нещо на компютъра, защото антивирусната си се update-ва постоянно и отвреме на време проверявам с Onlain Panda от интернета. Обаче писна ми от такива. Не обичам някой да се опитва да пипа нещо мое без аз да мога да отвърна на същото.

Link to comment
Share on other sites

аз пък съм щастлив като виждам че хората проявяват интерес към защитата на компютрите си. ако имат какъвто и да е firewall и antivirus е голяма стъпка напред. а иначе ако ставше нещо обезпокоително в ек щяха да се погрижат - доста лесно се следи кой много пинг-ва наляво надясно. лошо е ако има инфекция компютъра, защото иначе портовете са си просто затворени. само слагайте sp2 на xp и лошото ви е отминало :-p

Link to comment
Share on other sites

Не че ми пука, че някой ше ми направи нещо на компютъра, защото антивирусната си се update-ва постоянно и отвреме на време проверявам с Onlain Panda от интернета. Обаче писна ми от такива. Не обичам някой да се опитва да пипа нещо мое без аз да мога да отвърна на същото.

 

breakneck, въобще не се опита да схванеш най-важното, което ти каза tedy, а продължаваш да пищиш, че "някой се опитва да пипа нещо твое без да можеш да отвърнеш".

Сляпото доверие на всякакъв "антивирусен", "антихакерски" и всякакъв анти-софтуер е способно да ни превърне в истерични параноици.

Link to comment
Share on other sites

Добре де. Нали все пак това е реален IP адрес на еврокома. Как тогава ще го засече антивирусната. Тя не ходи сама да си търси.

Da Devil ai kaji mi nqkkaf sait ot kadeto moga da si drapna nai novia Kaspersky l 6tot sam samo s nqkva mizerna programa.Kazva se AntiVir,i edin Fierwall mani,mani

Напиши в търсачката на дата.бг Kaspersky и си избери. И серийни номера има и каквото поискаш.

Link to comment
Share on other sites

Добре де. Нали все пак това е реален IP адрес на еврокома. Как тогава ще го засече антивирусната. Тя не ходи сама да си търси.

 

Напиши в търсачката на дата.бг Kaspersky и си избери. И серийни номера има и каквото поискаш.

И за какво е цялото шашкане ????

от дадения в началото линк ето какво дава за моето IP

[ Port Scanner ]

Your query has produced following results:

Scan time : 1 min. 13 sec.

(only well-known ports scanned)

Total scanned 462 ports

Found 1 open port(s)

 

80 : http (HyperText Transfer Protocol

;) ;)

Link to comment
Share on other sites

Добре, а аз какво да кажа. Щом сте тръгнали да ревете, ми да порева и аз тогава. Само дето единствените, които ми вкарват нерви, са беглите опити да ми преебете апачето. Но ... както казах, щом ще си ревем в тая тема :

 212.104.97.124 - - [22/Feb/2005:04:05:42 +0200]"SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\......"
212.104.97.124 - - [22/Feb/2005:01:03:06 +0200]"SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\........."
212.104.102.101 - - [04/Apr/2005:22:11:18 +0300]"POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 404 -
212.104.102.101 - - [04/Apr/2005:22:11:42 +0300]"SEARCH /\x90\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\x04H\..."

Още простотии от еврокомски ИП-та да търся ли ... И въобще има ли смисъл ? Сляпата вяра в антивирусните ви програми и любимата ви ОС да какво води освен до паранои ?

Link to comment
Share on other sites

:blink: там пише :

Client's address we got

212.104.97.217

 

май т'ва е мойто ИП :huh: Поне така ми пише като дам local area conection / status / support :confused

 

да не съм напраил няква глупост :blink:

Link to comment
Share on other sites

Dica az niamam nito antyvirus-na nito niakav po seriozen firewall.Imam niakav ot samoiat windows kato se e update-val i karam veche super mnogo vreme bez problemi.I da me attack-va niakoi koi znae kakvo ne moje da mi napravi...taka che don't warry be happy.kato ima problemi-reinstal na windows-a i vsichko se reshava :)

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Guest
This topic is now closed to further replies.
×
×
  • Create New...