IP Address
IP Address
I keep getting a warning from Norton firewall, informing me that an attempt has been made (and blocked) to access my computer using a trojan horse. An IP address is given for the attacker.
Is there any way to trace where this attack has originated from ?
(Preferably an e-mail address).
Thanks for any advice
419
Is there any way to trace where this attack has originated from ?
(Preferably an e-mail address).
Thanks for any advice
419
Hmmmyeah
Joined: Apr 2004
Posts: 652
Likes: 0
From: Leopardess.
Warning; under informed response!!
I'm by no means an expert on this subject but since I have had some strange things going on myself lately computer wise it is of interest to me and I have been playing around with a few things.
Try running the IP through this. (30 day demo). It will give you a location and most likely an indication of the name of ISP being used, you can then complain to their abuse department for them to investigate the matter further.
Most IP's of home users change so will not definately point to the culprit. The ISP will however be able to check their logs to see whom the IP you have was allocated to at any specific time.
Do bear in mind that the IP could be that of a proxy server (??) that hides the true IP of the attacker.
Please be aware that I'm not sure if these are the correct terms for things or even if I'm technically correct in my comments, it is 'as far as I know' type info only!
I look forward to a more informed response from those in the know, having the errors I have most likely made here corrected and learning more on the subject.
I'm by no means an expert on this subject but since I have had some strange things going on myself lately computer wise it is of interest to me and I have been playing around with a few things.
Try running the IP through this. (30 day demo). It will give you a location and most likely an indication of the name of ISP being used, you can then complain to their abuse department for them to investigate the matter further.
Most IP's of home users change so will not definately point to the culprit. The ISP will however be able to check their logs to see whom the IP you have was allocated to at any specific time.
Do bear in mind that the IP could be that of a proxy server (??) that hides the true IP of the attacker.
Please be aware that I'm not sure if these are the correct terms for things or even if I'm technically correct in my comments, it is 'as far as I know' type info only!
I look forward to a more informed response from those in the know, having the errors I have most likely made here corrected and learning more on the subject.
Joined: Aug 2002
Posts: 0
Likes: 0
From: Surrey, UK.
[list=1][*]Go here [*]Paste "offending" IP address into 3rd box down in centre column[*]Read details[*]Email the "abuse" email address[*]Sit back and wait whilst SFA actually happens about it 
[/list=1]
Or,
Be thankful you have a firewall and forget about it because it happens all the time
[/list=1] Or,
Be thankful you have a firewall and forget about it because it happens all the time
The Oracle
Joined: Aug 2001
Posts: 2,902
Likes: 0
From: Naples, Florida U.S.A.
419,
Turn off the warnings. It is probably a computer that the P.D.U. does not know is infected.
It is much better to turn off those warnings so you do not know about all the attacks that constantly happen. (Most are just Port Sniffing.)
Take Care,
Richard
Turn off the warnings. It is probably a computer that the P.D.U. does not know is infected.
It is much better to turn off those warnings so you do not know about all the attacks that constantly happen. (Most are just Port Sniffing.)
Take Care,
Richard
Joined: Sep 2004
Posts: 7
Likes: 0
From: hawaii
address finder
Cunning Artificer
Joined: Jun 2001
Posts: 3,125
Likes: 7
From: The spiritual home of DeHavilland
Or try Sam Spade The owner has some interesting perspectives on computer security, or rather the lack of it no matter how hard you may try.
Enter the offending IP Adress number into the 'IP Whois' field and get the name and details of the offending computer. It may be spoofed though, and the owner will be unaware that they are hosting a parasite.
Monitoring probe attempts can be interesting, but Firewalls tell you too much and its not a good idea to ping the IPs of the sources. That tells them you're there and you've done the job for them by compromising your own invisibility - if you have any...
Check how tight your firewall is at Steve Gibson's Shields Up free service. Be prepared for some surprises. After using his site my own PC is so tight it doesn't even know it exists itself, never mind anyone else.
But that doesn't guarantee safety. As long as you're on the internet someone, somewhere will get into your computer and screw it up.
Enter the offending IP Adress number into the 'IP Whois' field and get the name and details of the offending computer. It may be spoofed though, and the owner will be unaware that they are hosting a parasite.
Monitoring probe attempts can be interesting, but Firewalls tell you too much and its not a good idea to ping the IPs of the sources. That tells them you're there and you've done the job for them by compromising your own invisibility - if you have any...
Check how tight your firewall is at Steve Gibson's Shields Up free service. Be prepared for some surprises. After using his site my own PC is so tight it doesn't even know it exists itself, never mind anyone else.
But that doesn't guarantee safety. As long as you're on the internet someone, somewhere will get into your computer and screw it up.
Last edited by Blacksheep; 2nd September 2004 at 08:34.
