[Dshield] What should I do next

Paul de Vrieze pauldv at cs.kun.nl
Fri May 10 11:35:38 GMT 2002


On Friday 10 May 2002 06:50, Jim Gifford wrote:
> I have question to pose. Over the last few weeks, I have had somebody
> attempting to hack into my system. I got a little ticked off and wrote my
> own iptables firewall. I added the string blocking capability. I have it
> log informaition, about these attacks. I have contacted the owner of the IP
> block to no avail, what should I do next. Here is a sample of what I am
> seeing.
>

Is it allways the same machine?
If not, probably just some scans by trojans. If yes, probably a bad trojan. 
Only in case you have different kinds of lines against from the same IP, you 
can think of someone actually targeting your pc.

Paul

-- 
Paul de Vrieze
Junior Researcher
Mail: pauldv at cs.kun.nl
Homepage: http://www.devrieze.net




More information about the list mailing list