Home | Community | Message Board
You are not signed in.
Sign In New Account
Forum Index Search Posts Trusted Vendors Highlights Galleries FAQ User List Chat Store Random Growery

MushroomMan Mycology
This site includes paid links. Please support our sponsors.

Community > The Pub
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Myyco.com Shop: Golden Teacher Liquid Culture For Sale

Jump to first unread post Pages: 1
Network gurus: need your help
    #5616782 -

Alright, so I set up my router so that it would send me emails when it detected a "hack attempt." The emails never worked untill I recently enabled IP passthrough on the DSL modem. IP passthrough is set up so that the the modem gives the router the same IP that the router works, this way I can run FTP/http servers.

I checked my mail today and over the past 3 days I have gotten 1247 emails that say this, with the time/date varying:

Time: 05/10/2006, 07:44:46
Message: LAND
Source: 72.145.231.69, 17555
Destination:72.145.231.69, 6663 (from WAN Inbound)

The port range on destination varies, but they're all in the 6660-6669 range. Do you think I picked up some kind of IRC Trojan? What do you reccomend to find/remove it?

I have Symantec that updates daily, and it hasn't caught anything if I DO have a trojan.

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Gumby]
    #5616809 -

I don't know what it is - looked up the IP and it came up with this.

IP Address : 72.145.231.69 [ adsl-145-231-69.asm.bellsouth.net ]
ISP : BellSouth.net
Organization : BellSouth.net
Location : US, United States
City : Lilburn, GA 30048
Latitude : 33°90'02" North
Longitude : 84°12'55" West


OrgName: BellSouth.net Inc.
OrgID: BELL
City: Atlanta
StateProv: GA
PostalCode: 30324
Country: US

ReferralServer: <a href="rwhois://rwhois.eng.bellsouth.net:4321" target="_blank">rwhois://rwhois.eng.bellsouth.net:4321</a>

NetRange: 72.144.0.0 - 72.159.255.255
CIDR: 72.144.0.0/12
NetName: BELLSNET-BLK15
NetHandle: NET-72-144-0-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
NameServer: NS.BELLSOUTH.NET
NameServer: NS.ATL.BELLSOUTH.NET
NameServer: NS.MIA.BELLSOUTH.NET
NameServer: NS.RDU.BELLSOUTH.NET
Comment:
Comment: For Abuse Issues, email [Email]abuse@bellsouth.net.[/Email] NO ATTACHMENTS. Include IP
Comment: address, time/date, message header, and attack logs.
Comment: For Subpoena Request, email ipoperations@bellsouth.net with "SUBPOENA" in
Comment: the subject line. Law Enforcement Agencies ONLY, please.
RegDate: 2005-08-11
Updated: 2005-11-11

RAbuseHandle: ABUSE81-ARIN
RAbuseName: Abuse Group
RAbusePhone: +1-404-499-5224
RAbuseEmail: abuse@bellsouth.net

RTechHandle: JG726-ARIN
RTechName: Geurin, Joe
RTechPhone: +1-404-499-5240
RTechEmail: ipoperations@bellsouth.net

OrgAbuseHandle: ABUSE81-ARIN
OrgAbuseName: Abuse Group
OrgAbusePhone: +1-404-499-5224
OrgAbuseEmail: abuse@bellsouth.net

OrgTechHandle: JG726-ARIN
OrgTechName: Geurin, Joe
OrgTechPhone: +1-404-499-5240
OrgTechEmail: ipoperations@bellsouth.net

# ARIN WHOIS database, last updated 2006-05-10 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database


--------------------
Immortal / Temporarily Retired
The OG Thread Killer
My mushroom hunting gallery

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Gumby]
    #5616817 -

It's probably just a worm checking for vunerabilities.

As long as your firewall is on, you don't have to worry.

Turn off the e-mail notification shit, that'll just annoy you.

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: eris]
    #5616835 -

Yeah... that was an old IP of mine. It looks like it's originating from somewhere in the network and going back into the network? i r confused.

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Gumby]
    #5616953 -

Are you running any type of software firewall? It could be that or your antivirus program. Like stated previously it could be just random programs tickling and ip list. When i got my cable modem i set up zonealarm until i could get a router. Within 5 minutes of me being online i had been probed around 30 times for vunerabilities. The NAT firewall built into the routers does a surprisingly effective job at keeping people out of your network. If someone really wanted to get in im sure they could find a way, but, most programs just give up if no easy access is found into your network.


--------------------
To get really high is to forget yourself. And to forget yourself is to see everything else. And to see everything else is to become an understanding molecule in evolution, a conscious tool of the universe. And I think every human being should be a conscious tool of the universe. . . .

-JG

i really am glad you came back to us instead of taking the other path. *hug*

-A_S (RIP your final words to me will never be forgotten)



Don't fuck with the laughing jesus.

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: coda]
    #5616963 -

Nope, no software firewalls, just the one that came with XP.

I downloaded trojan remover and "adware.mediaback" was found on my personal computer. I think I'm going to download and run that on all computers on the network. Only 5 more computers to go!  :smirk:

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Gumby]
    #5616965 -

I would recommend turning ip passthrough back off and just using port forwarding for your ftp/http needs.


--------------------
Any information written above is purely fictional.
Any images do not belong to the owner of this account.

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Jfisher]
    #5616986 -

I tried that prior to turning on IP passthrough and no one could access my http server :frown:

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: Gumby]
    #5617837 -

You were probably doing it wrong then.

What kind of router do you have?

Extras: Filter Print Post Top
Re: Network gurus: need your help [Re: VoidOfsPg]
    #5618390 -

SMC Barricade 802.11g + print server

Extras: Filter Print Post Top
Jump to top Pages: 1

Myyco.com Shop: Golden Teacher Liquid Culture For Sale

Community > The Pub
Threaded Mode Threaded  Previous topic Previous  View all topics Index  Next topic Next 

Similar ThreadsPosterViewsRepliesLast post
* Did Ram Dass really give his guru a 10-strip to no effect?
( 1 2 3 4 5 6 7 8 all )		 ToolTroll 17,895 146 09/28/15 01:13 AM
by TheGreenArrow
* Rapper Guru in coma after heart attack LobsterSauceDiscord 825 6 03/01/10 02:44 PM
by LobsterSauce
* R.I.P Guru blazenn 871 10 04/20/10 01:48 PM
by seraphnz
* Wanna-be Guru's
( 1 2 all )		 Bigfeely123 1,355 32 05/29/15 02:14 PM
by Trichome_Delta9
* How would you one go about finding a kundalini guru? krypto2000 1,161 10 12/10/09 09:53 PM
by krypto2000
* Gang Starr, Jazzmatazz Rapper Guru Dead at 43... LobsterSauceDiscord 393 2 04/20/10 05:48 PM
by publicenemy1
* Are you a drug guru?
( 1 2 3 all )		 skatealex2 2,491 43 08/04/12 10:25 AM
by sanchothestoner
* "Was Psychedelic Guru Terence McKenna Goofing About 2012 Prophecy?" Playful Hate 1,427 5 08/06/12 05:06 PM
by Schwann

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Entire Staff
782 topic views. 5 members, 467 guests and 107 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ]
Search this thread:

Copyright 1997-2026 Mind Media. Some rights reserved.

Generated in 0.023 seconds spending 0.005 seconds on 14 queries.