Forum Home
Press F1
 
Thread ID: 32900 2003-05-01 02:05:00 Pesky PC trying to hack in draftycloud (2278) Press F1
Post ID Timestamp Content User
140486 2003-05-01 02:05:00 Hi people,
Need some help with a hacking attempt ( at least thats what I think it is!)
I run Norton Antivirus with Internet Security and have been attacked/ probed frequently by the same person or PC. The security thing picks it up and blocks it. How do I go about indentifying the culprit? I have the details below.

Protocol : TCP (Inbound)
Remote Address : 202.90.141.145:3388
Local Address : dr-ntnpwb6u4hj9 (219.88.0.180):5001
Remote Computer :(202.90.141.145)

Thanks for the help
draftycloud (2278)
140487 2003-05-01 02:36:00 basicly unless your a buisness or are running a server (web pages etc) then don't bother doing anything. tracking back can simpy tip off that you are actually there. tweak'e (174)
140488 2003-05-01 03:08:00 Well, for what it's worth, the IP address 202.90.141.145 is one of a block belonging to the Advanced Science and Technology Institute in Quezon, the Phillippines.

You could always try emailing them with a complaint, I suppose; but if the culprit is actually on that site he/she won't be easy to find. Assignment of addresses to individula machines may be dynamic and the student population certainly is.

Most likely they'll says: "not one of ours", even if it is.

Argus
argus (366)
140489 2003-05-01 03:13:00 Port 3388 is listed as "cbserver". That might be a CB-radio-like protocol. Have you used a chat site recently? It might not want to let you go. :D Graham L (2)
140490 2003-05-01 04:29:00 Anytime you want to know something about an IP address, your first port of call should be http://www.samspade.org which has a whole assortment of tools as well as a downloadable version. It will most likely give you more information than you know what to do with, but at the worst you just dont bother reading it. Iain Walmsley (3372)
140491 2003-05-01 08:22:00 Thanks for that info. Will have a playaround with that site ( behind my firewall of course!) draftycloud (2278)
140492 2003-05-01 08:23:00 Thanks for the reply. The only chat site I've used consistently has been the MSN one draftycloud (2278)
140493 2003-05-01 08:25:00 Thanks Argus. I remember reading about that particular institution in Time magazine. It seems to be the alma mater for hackers in that region:) draftycloud (2278)
1