[Dshield] What should I do next

Paul de Vrieze pauldv at cs.kun.nl
Fri May 10 11:35:38 GMT 2002

On Friday 10 May 2002 06:50, Jim Gifford wrote:
> I have question to pose. Over the last few weeks, I have had somebody
> attempting to hack into my system. I got a little ticked off and wrote my
> own iptables firewall. I added the string blocking capability. I have it
> log informaition, about these attacks. I have contacted the owner of the IP
> block to no avail, what should I do next. Here is a sample of what I am
> seeing.

Is it allways the same machine?
If not, probably just some scans by trojans. If yes, probably a bad trojan. 
Only in case you have different kinds of lines against from the same IP, you 
can think of someone actually targeting your pc.


Paul de Vrieze
Junior Researcher
Mail: pauldv at cs.kun.nl
Homepage: http://www.devrieze.net

More information about the list mailing list