hacking

[t92300]

i think some one haws just been trying to hack my computer
my firewall has logged about six attempts from someone trying to access my cpomputer
the firewall denied them of course
the question is how do i find out about the person trying to access my computer

thanks

 

[ainwood]

Did the firewall log the IP of the person trying to do it?

That might be a good place to start

 

[Scientia]

Which firewall are you using? What type of event was logged and on what ports? A port scan?

In most cases it is simply better to let it go because a *real* hacker is going to take measure to hide or spoof his/her real IP address (such as using a trojan-infected PC to conduct any malicious activities). If your firewall is blocking it, then it is doing its job.

A lot of times, firewalls will detect port scans, but keep in mind that these are usually not aimed at your machine specifically, but rather someone is scanning a block of IP addresses looking for ports that are open, or more importantly, ports that have services assigned and are "listening".

If you are new to firewalls, I would suggest looking for some security forums on the internet that can help teach you the differences between when you should be concerned and when you should not. There are some good ones at www.dslreports.com. If you're really paranoid, you can learn a lot of good things from Steve Gibson's site at grc.com.

 

[t92300]

i am using tiny personal firewall
and the rule that detected it was a rule at the bottom of the list that blocks anything from/to any port using any protocol this rule comes after the ones for internet explorer etc so it dosent block them it blocks all else

what do i do with the ip/domain name

 

[nixon]

I experienced that a half year ago, when ZoneAlarm blocked someone's attempt to access the computer. First thing I did was to check the IP - it was my own! Don't know what the hell happened, and it only did it once or twice, and then I never heard from it again. Anyway, that could be a nice little hacker cover-up, calming you down we you realize it's your own IP and decide to do nothing about it.

 

[gael]

I get the same problem nearly every time i log on to the internet.

At one stage i was being hit at least once every 20 to 30 mins with Trojan hack viruses. Now it's probably only once or twice every few hours.
It seems to be mostly the same person/company/whoever thats doing it. I was kinda late installing a firewall onto my computer, this was probably half the problem.

It can be a major pain in the butt, and very frustrating.
I'd advise getting the Norton Personal Firewall, it tracks thier IP addresses and gives the location and network they are using.
Although when i reported all this information to the network of this persistant pr**k, i was told that it was not illegal unless he had actually gottin into my computer. In which case i would have had no idea that he was there.

I forget the URL, put there is a Trojan remover program that you can get for free on the internet somewhere, i think it is actually called 'Trojan Remover'. Try Google.

Also try 'add-aware', another free program for removing spyware. Sometimes these can set your firewall off.

Beware of dowloads you get from Shareware programs such as Kazzalite etc, these can be used by so called 'hackers' to by-pass your firewall and install Trojans.

PS. If i you ever meet someone you tells you he is a 'Hacker' (Cyperpest). Kick him hard in the nuts.