WHAT the H*EEELLL!! Somebody is scanning me!

Predabot · Post by **Predabot** » Fri Sep 30, 2005 8:14 pm

That's right!! That **** is at it right now! GRRR!!!

Here's the essential information that a simple back-trace revealed:
------------------------
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-propo ... 50331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '213.245.132.0 - 213.245.160.255'

inetnum: 213.245.132.0 - 213.245.160.255
netname: CHAMP-CUSTOMER-CABLE
descr: Chello France
descr: Customers in Champ sur Marne
country: FR
admin-c: HL1408-RIPE
tech-c: HMCB1-RIPE
status: ASSIGNED PA
remarks: Contact abuse@chello.fr concerning criminal
remarks: activities like spam, hacks, portscans
mnt-by: CHELLO-MNT
source: RIPE # Filtered

role: Hostmaster Chello Broadband
address: UPC Technology
address: Internet Services
address: Erlachplatz 116
address: A-1100 Vienna
address: Austria
phone: +43 1 96068 5000
fax-no: +43 1 96068 5666
e-mail: hostmaster@chello.at
admin-c: AK991-RIPE
tech-c: MG111
tech-c: MS2509-RIPE
tech-c: AK991-RIPE
nic-hdl: HMCB1-RIPE
mnt-by: CHELLO-MNT
source: RIPE # Filtered

person: Hubert Lesclaux
address: UPC FRANCE
address: 20, place des Vins de France
address: F-75012 Paris
address: France
phone: +33 1 5344 8129
fax-no: +33 1 5344 8061
e-mail: hostmaster@chello.at
nic-hdl: HL1408-RIPE
mnt-by: CHELLO-MNT
source: RIPE # Filtered

% Information related to '213.245.128.0/17AS6830'

route: 213.245.128.0/17
descr: UPC.fr
origin: AS6830
mnt-by: CHELLO-MNT
source: RIPE # Filtered
----------------------------------

Screengrab: http://img.photobucket.com/albums/v309/ ... fooker.jpg

What an immensely tarding little ****I've been getting this discusting little message from my avast e-mail scanner saying something about dc++ couldn't connect to something, bla bla. And I've been wondering what the smeg it was!
Here it is AGAIN by the way: http://img.photobucket.com/albums/v309/ ... -shit2.jpg

Any of you experienced lads know what would be the logical and proper next step, in retaliating against this obscene little ****?

Edited for language - Spidey.

Hound · Post by **Hound** » Fri Sep 30, 2005 8:23 pm

is there actually any need to type up all that foul language?

Go ask the guys at Seibertron.....and stay there

Predabot · Post by **Predabot** » Fri Sep 30, 2005 8:24 pm

I got carried away in my rather intense rage.

Seibertron be scary. Do you know what to do about attacking hackers tho?

Post by **Denyer** » Fri Sep 30, 2005 8:58 pm

Yeah; that it's not worth the time or energy... seriously, I don't even show firewall reports.

Predabot · Post by **Predabot** » Fri Sep 30, 2005 9:03 pm

Aha, ok. But how do I get that terribly annoying message to go away? It seems as if DC++ is trying to connect to some adress, but my security programs won't let it. And it keeps trying. I really don't want to have to press that button any more.

It's popping up as I type...

Post by **Denyer** » Fri Sep 30, 2005 9:52 pm

If that's Sygate, Options > General > Notification > Hide notification messages. And set a rule to block the incoming connection...

Predabot · Post by **Predabot** » Fri Sep 30, 2005 10:47 pm

Ok, messages hidden. Blocking that might get harder tho. How do I do that, and how do I single the evil out?

EDIT: This dile.serra.cl is an outgoing signal. Wich is what's popping up. I checked traffic log. Hmm, is this helpful? I just realised that I'm far more inexperienced in the use of this and all fire-wall progs than I thought.

EDIT2: I searched help for it, and found advanced rules.

I checked the adress-ip that it used and typed in that, and then I selected all applications to be affected by the rule. It could have been only DC++ being used for the evil, but what the heck. Best to block it all.

I thank thee for thy aid oh wise and kind Denyer.

It was really quite helpful.

KingMob · Post by **KingMob** » Sat Oct 01, 2005 6:46 am

Hound wrote:is there actually any need to type up all that foul language?

Go ask the guys at Seibertron.....and stay there

Please, Flying Spaghetti Monster, no.

Post by **spiderfrommars** » Sat Oct 01, 2005 8:31 am

Preds, go easy on the language ok? Your point gets lost when you over do it.

Post by **Best First** » Sat Oct 01, 2005 10:23 am

along with your posting account if you keep it up. This 'i was angry so its ok' excuse has never worked. last time, knock it off.