Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Oh well, my computer is safe, so not overly concerned. A good idea though for everyone to consider keeping a solid firewall in place kisses Tom Boy At 01:14 AM 14/12/01 -0700, you wrote: Unfortunately it isn't quite as easy as it seems. The message board software sober24 uses logs IPs, and has the capability of displaying them (I've seen the same software used elsewhere, displaying the IPs) but they keep them hidden presumably for the safety and anonymity of those with static addresses (cable and DSL users, for example). If he got it off the board, he must have moderator access over there. Another way he could have gotten it - have you ever written him any email directly? He could have gotten it from an email header. Has he ever emailed you directly? Re: Re: potential hacker Oh I will definitely post that on Sober24 if it does turn out to be him or one of his merry little gang. Right now I don't know anything, because I don't know how to do the detective work *but* our bud Mike knows how, so hopefully he will find out something. Bottom line is I hope I am wrong, I don't like to think ill of people (AA programming) but we shall see kisses Tom Boy At 07:19 AM 14/12/01 +0000, you wrote: not very serene of him is it? maybe you should just tell him to hit his knees and pray and suggest he needs a meeting right NOW. > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Oh well, my computer is safe, so not overly concerned. A good idea though for everyone to consider keeping a solid firewall in place kisses Tom Boy At 01:14 AM 14/12/01 -0700, you wrote: Unfortunately it isn't quite as easy as it seems. The message board software sober24 uses logs IPs, and has the capability of displaying them (I've seen the same software used elsewhere, displaying the IPs) but they keep them hidden presumably for the safety and anonymity of those with static addresses (cable and DSL users, for example). If he got it off the board, he must have moderator access over there. Another way he could have gotten it - have you ever written him any email directly? He could have gotten it from an email header. Has he ever emailed you directly? Re: Re: potential hacker Oh I will definitely post that on Sober24 if it does turn out to be him or one of his merry little gang. Right now I don't know anything, because I don't know how to do the detective work *but* our bud Mike knows how, so hopefully he will find out something. Bottom line is I hope I am wrong, I don't like to think ill of people (AA programming) but we shall see kisses Tom Boy At 07:19 AM 14/12/01 +0000, you wrote: not very serene of him is it? maybe you should just tell him to hit his knees and pray and suggest he needs a meeting right NOW. > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Is this 'hacking' something that only be done while you are actually 'online'? (I realise what a stupid question that is! Still not sure though, so best thing is to ask) M. Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Hadn't heard of that one before. And then it would also apply to the other two of the identical triplets... " Grokster " and " Morpheus " . Re: potential hacker > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Mike, I'm using SamSpade.org. When I did a trace route on 63.17.175.175, it came up as 1Cust175.tnt1.valparaiso2.in.da.uu.net. I then did a whois 1Cust175.tnt1.valparaiso2.in.da.uu.net @ Magic, and came up with this http://www.samspade.org/t/refer?a=UU.NET.IS.NO.MATCH.FOR.THE.UBER-GEEKS.AT.J IMPHILLIPS.ORG. I then went to jimphillps.org. I have no idea if this is the actual guy, or someone is hiding behind this. Maybe you can figure it out. I know how to click on buttons at samspade, but that's as far as I go. Thought I'd try to help, since I'm extremely curious about this capecod guy. Re: potential hacker > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > though > > for everyone to consider keeping a solid firewall in place > > > > kisses > > Tom Boy > > Attempts to gain input connection on port 1214 has been remarked on > *before* in a number of places. It seems that this is particularly > associated with a product known as " Kazaa " which is (yet) another of > those (damned) mp3 search engines. It may be that someone is *trying* > to exploit a known weakness in the Kazaa program, but I doubt it is > this CapeCod person... he seems to be merely a typical AA narcissist > sponsorial type who need a quota of hero-worship from his followers. > I don't get the impression the guy is the sharpest tool in the box... > > Mack > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Mike, I'm using SamSpade.org. When I did a trace route on 63.17.175.175, it came up as 1Cust175.tnt1.valparaiso2.in.da.uu.net. I then did a whois 1Cust175.tnt1.valparaiso2.in.da.uu.net @ Magic, and came up with this http://www.samspade.org/t/refer?a=UU.NET.IS.NO.MATCH.FOR.THE.UBER-GEEKS.AT.J IMPHILLIPS.ORG. I then went to jimphillps.org. I have no idea if this is the actual guy, or someone is hiding behind this. Maybe you can figure it out. I know how to click on buttons at samspade, but that's as far as I go. Thought I'd try to help, since I'm extremely curious about this capecod guy. Re: potential hacker > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > though > > for everyone to consider keeping a solid firewall in place > > > > kisses > > Tom Boy > > Attempts to gain input connection on port 1214 has been remarked on > *before* in a number of places. It seems that this is particularly > associated with a product known as " Kazaa " which is (yet) another of > those (damned) mp3 search engines. It may be that someone is *trying* > to exploit a known weakness in the Kazaa program, but I doubt it is > this CapeCod person... he seems to be merely a typical AA narcissist > sponsorial type who need a quota of hero-worship from his followers. > I don't get the impression the guy is the sharpest tool in the box... > > Mack > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 http://stealthtests.lockdowncorp.com/ This site will test how open to attack you are, prepare to be scared if you do not have a firewall or good ISP Re: Re: potential hacker > Mike, > I'm using SamSpade.org. When I did a trace route on 63.17.175.175, it came > up as 1Cust175.tnt1.valparaiso2.in.da.uu.net. > I then did a whois 1Cust175.tnt1.valparaiso2.in.da.uu.net @ Magic, and came > up with this > http://www.samspade.org/t/refer?a=UU.NET.IS.NO.MATCH.FOR.THE.UBER-GEEKS.AT.J > IMPHILLIPS.ORG. > > I then went to jimphillps.org. > I have no idea if this is the actual guy, or someone is hiding behind this. > Maybe you can figure it out. I know how to click on buttons at samspade, but > that's as far as I go. Thought I'd try to help, since I'm extremely curious > about this capecod guy. > > > Re: potential hacker > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > though > > > for everyone to consider keeping a solid firewall in place > > > > > > kisses > > > Tom Boy > > > > Attempts to gain input connection on port 1214 has been remarked on > > *before* in a number of places. It seems that this is particularly > > associated with a product known as " Kazaa " which is (yet) another of > > those (damned) mp3 search engines. It may be that someone is *trying* > > to exploit a known weakness in the Kazaa program, but I doubt it is > > this CapeCod person... he seems to be merely a typical AA narcissist > > sponsorial type who need a quota of hero-worship from his followers. > > I don't get the impression the guy is the sharpest tool in the box... > > > > Mack > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 http://stealthtests.lockdowncorp.com/ This site will test how open to attack you are, prepare to be scared if you do not have a firewall or good ISP Re: Re: potential hacker > Mike, > I'm using SamSpade.org. When I did a trace route on 63.17.175.175, it came > up as 1Cust175.tnt1.valparaiso2.in.da.uu.net. > I then did a whois 1Cust175.tnt1.valparaiso2.in.da.uu.net @ Magic, and came > up with this > http://www.samspade.org/t/refer?a=UU.NET.IS.NO.MATCH.FOR.THE.UBER-GEEKS.AT.J > IMPHILLIPS.ORG. > > I then went to jimphillps.org. > I have no idea if this is the actual guy, or someone is hiding behind this. > Maybe you can figure it out. I know how to click on buttons at samspade, but > that's as far as I go. Thought I'd try to help, since I'm extremely curious > about this capecod guy. > > > Re: potential hacker > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > though > > > for everyone to consider keeping a solid firewall in place > > > > > > kisses > > > Tom Boy > > > > Attempts to gain input connection on port 1214 has been remarked on > > *before* in a number of places. It seems that this is particularly > > associated with a product known as " Kazaa " which is (yet) another of > > those (damned) mp3 search engines. It may be that someone is *trying* > > to exploit a known weakness in the Kazaa program, but I doubt it is > > this CapeCod person... he seems to be merely a typical AA narcissist > > sponsorial type who need a quota of hero-worship from his followers. > > I don't get the impression the guy is the sharpest tool in the box... > > > > Mack > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 http://stealthtests.lockdowncorp.com/ This site will test how open to attack you are, prepare to be scared if you do not have a firewall or good ISP Re: Re: potential hacker > Mike, > I'm using SamSpade.org. When I did a trace route on 63.17.175.175, it came > up as 1Cust175.tnt1.valparaiso2.in.da.uu.net. > I then did a whois 1Cust175.tnt1.valparaiso2.in.da.uu.net @ Magic, and came > up with this > http://www.samspade.org/t/refer?a=UU.NET.IS.NO.MATCH.FOR.THE.UBER-GEEKS.AT.J > IMPHILLIPS.ORG. > > I then went to jimphillps.org. > I have no idea if this is the actual guy, or someone is hiding behind this. > Maybe you can figure it out. I know how to click on buttons at samspade, but > that's as far as I go. Thought I'd try to help, since I'm extremely curious > about this capecod guy. > > > Re: potential hacker > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > though > > > for everyone to consider keeping a solid firewall in place > > > > > > kisses > > > Tom Boy > > > > Attempts to gain input connection on port 1214 has been remarked on > > *before* in a number of places. It seems that this is particularly > > associated with a product known as " Kazaa " which is (yet) another of > > those (damned) mp3 search engines. It may be that someone is *trying* > > to exploit a known weakness in the Kazaa program, but I doubt it is > > this CapeCod person... he seems to be merely a typical AA narcissist > > sponsorial type who need a quota of hero-worship from his followers. > > I don't get the impression the guy is the sharpest tool in the box... > > > > Mack > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 , Thank you. Actually I was doing a trace on the people that have hit Tomboy's computer 200 times. I will try this link, though. I like grc.com, too. Go to the 'probe my ports' and 'test my shields' links. They are under the 'Shield's Up' logo. I'm assuming you have windows.... Re: potential hacker > > > > > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > > though > > > > for everyone to consider keeping a solid firewall in place > > > > > > > > kisses > > > > Tom Boy > > > > > > Attempts to gain input connection on port 1214 has been remarked on > > > *before* in a number of places. It seems that this is particularly > > > associated with a product known as " Kazaa " which is (yet) another of > > > those (damned) mp3 search engines. It may be that someone is *trying* > > > to exploit a known weakness in the Kazaa program, but I doubt it is > > > this CapeCod person... he seems to be merely a typical AA narcissist > > > sponsorial type who need a quota of hero-worship from his followers. > > > I don't get the impression the guy is the sharpest tool in the box... > > > > > > Mack > > > > > > > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 , Thank you. Actually I was doing a trace on the people that have hit Tomboy's computer 200 times. I will try this link, though. I like grc.com, too. Go to the 'probe my ports' and 'test my shields' links. They are under the 'Shield's Up' logo. I'm assuming you have windows.... Re: potential hacker > > > > > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > > though > > > > for everyone to consider keeping a solid firewall in place > > > > > > > > kisses > > > > Tom Boy > > > > > > Attempts to gain input connection on port 1214 has been remarked on > > > *before* in a number of places. It seems that this is particularly > > > associated with a product known as " Kazaa " which is (yet) another of > > > those (damned) mp3 search engines. It may be that someone is *trying* > > > to exploit a known weakness in the Kazaa program, but I doubt it is > > > this CapeCod person... he seems to be merely a typical AA narcissist > > > sponsorial type who need a quota of hero-worship from his followers. > > > I don't get the impression the guy is the sharpest tool in the box... > > > > > > Mack > > > > > > > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 , Thank you. Actually I was doing a trace on the people that have hit Tomboy's computer 200 times. I will try this link, though. I like grc.com, too. Go to the 'probe my ports' and 'test my shields' links. They are under the 'Shield's Up' logo. I'm assuming you have windows.... Re: potential hacker > > > > > > > > > > > > > Oh well, my computer is safe, so not overly concerned. A good idea > > > though > > > > for everyone to consider keeping a solid firewall in place > > > > > > > > kisses > > > > Tom Boy > > > > > > Attempts to gain input connection on port 1214 has been remarked on > > > *before* in a number of places. It seems that this is particularly > > > associated with a product known as " Kazaa " which is (yet) another of > > > those (damned) mp3 search engines. It may be that someone is *trying* > > > to exploit a known weakness in the Kazaa program, but I doubt it is > > > this CapeCod person... he seems to be merely a typical AA narcissist > > > sponsorial type who need a quota of hero-worship from his followers. > > > I don't get the impression the guy is the sharpest tool in the box... > > > > > > Mack > > > > > > > > > > > > > > > > > > Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 I sent the entire log to the Isp that you guys traced this to and now everything is quiet on the western front. Usual traffic, occasional ping but nothing else. I am extremely curious as to whether this is capecod. Here is the entire string that I got from my log (thanks to everyone I learned a couple of new things today!) GMT,63.17.175.175:3397,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/13,16:30:19 -8:00 then at the end of this little episode I started getting alerts from this one: GMT,63.17.175.150:3061,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/14,00:05:15 -8:00 I don't know if this helps find out anymore information or not. when all was said and done there were over 200 attempted hacks on my computer. Not impressed. I will check out some of the links and software suggested. This is one area I have no knowledge about and since I like to learn, off I go to study! kisses Tom Boy At 11:45 AM 14/12/01 +0000, you wrote: You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 I sent the entire log to the Isp that you guys traced this to and now everything is quiet on the western front. Usual traffic, occasional ping but nothing else. I am extremely curious as to whether this is capecod. Here is the entire string that I got from my log (thanks to everyone I learned a couple of new things today!) GMT,63.17.175.175:3397,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/13,16:30:19 -8:00 then at the end of this little episode I started getting alerts from this one: GMT,63.17.175.150:3061,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/14,00:05:15 -8:00 I don't know if this helps find out anymore information or not. when all was said and done there were over 200 attempted hacks on my computer. Not impressed. I will check out some of the links and software suggested. This is one area I have no knowledge about and since I like to learn, off I go to study! kisses Tom Boy At 11:45 AM 14/12/01 +0000, you wrote: You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 I sent the entire log to the Isp that you guys traced this to and now everything is quiet on the western front. Usual traffic, occasional ping but nothing else. I am extremely curious as to whether this is capecod. Here is the entire string that I got from my log (thanks to everyone I learned a couple of new things today!) GMT,63.17.175.175:3397,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/13,16:30:19 -8:00 then at the end of this little episode I started getting alerts from this one: GMT,63.17.175.150:3061,209.90.162.194:1214,TCP (flags:S) FWIN,2001/12/14,00:05:15 -8:00 I don't know if this helps find out anymore information or not. when all was said and done there were over 200 attempted hacks on my computer. Not impressed. I will check out some of the links and software suggested. This is one area I have no knowledge about and since I like to learn, off I go to study! kisses Tom Boy At 11:45 AM 14/12/01 +0000, you wrote: You can download a program called neotrace somewhere on the net. There is a warez version of it at fosi.da.ru and this allows you to take the IP address that ZoneAlarm catches and run a trace on it, finding out who the users ISP is. Thats kinda neat, it shows a map of the world, and zooms in on you, and then shows the path to where ever your hacker is. You can then email the hacker's ISP and tell them to do something about that person who is breaking the law (punishable by life in prison without parole) by attempting to break into your system. Normally an ISP will send a warning to the user (they can know exactly who it is if you include the IP number that you traced when you correspond with them) and the activity will stop. Of course, the FBI is really cracking down on the internet ever since September 11, so it is probably just them thinking you have something to hide because of your firewall and trying to break in and see what you are hiding. Or call me paranoid. If you don't want a warez version of the program, just search neotrace on the net and I am sure you can find a demo version. > Any of you that have been in Sober24 and upset Capecod, may want to make > sure your firewall is up to date. I use Zone Alarm and it is a free > download (as long as it is for personal use) and very easy and effective to > operate. > If you want zone alarm , go to the following url: > > www.zonelabs.com > > and get the regular free zone alarm. > > The reason I mention this is because as some of you know Capecod made > threats about using his *extensive* hacking experience on the people that > were annoying him. > Well, because I have zone alarm, my computer has denied over 200 attempts > to access my computer today. The same amount of attempts were done > yesterday. Usually I will have 2-3 background noise kinda things in the day. > > So, there is a good possibility that someone is attempting to cause trouble. > > Because of the extremely high volume of attemps , I did contact my isp with > the information about 2 hours ago. Amazingly all is quiet on the western > front for the first time in 2 days. > > May be nothing to it, except for my gut feeling. > > If anyone knows how to track the isp's , please let me know as I do have > the address of the person who was attempting to get in to my computer. > > kisses > Tom Boy > > > ...You may shoot me with your words, > You may cut me with your eyes, > You may kill me with your hatefulness, > But still, like air, I'll rise.... > > --Maya Angelou Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Luckily I have a really good firewall and an excellent isp, I have done checks to see how secure my firewall is and it is tickled silly with what I have. Am familiar with " Kazaa " and I don't have it on my computer. When installing Grokster or napster now, it has to ask permission to install Kazaa, unfortunately most people just keep hitting yes yes yes okay fine sure as they are installing software, not reading what they are saying yes to. I belong to the Fred Langa list and it has been so helpful in learning stuff like this. Would strongly recommend anyone who wants to keep up to date on stuff to subscribe to his list at www.langa.com. Oh and CB , yes hacking is done when you are online. Everyone should have a firewall to protect them from the ninnies of the planet! kisses Tom Boy At 12:51 PM 14/12/01 +0000, you wrote: > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Guest guest Posted December 14, 2001 Report Share Posted December 14, 2001 Luckily I have a really good firewall and an excellent isp, I have done checks to see how secure my firewall is and it is tickled silly with what I have. Am familiar with " Kazaa " and I don't have it on my computer. When installing Grokster or napster now, it has to ask permission to install Kazaa, unfortunately most people just keep hitting yes yes yes okay fine sure as they are installing software, not reading what they are saying yes to. I belong to the Fred Langa list and it has been so helpful in learning stuff like this. Would strongly recommend anyone who wants to keep up to date on stuff to subscribe to his list at www.langa.com. Oh and CB , yes hacking is done when you are online. Everyone should have a firewall to protect them from the ninnies of the planet! kisses Tom Boy At 12:51 PM 14/12/01 +0000, you wrote: > Oh well, my computer is safe, so not overly concerned. A good idea though > for everyone to consider keeping a solid firewall in place > > kisses > Tom Boy Attempts to gain input connection on port 1214 has been remarked on *before* in a number of places. It seems that this is particularly associated with a product known as " Kazaa " which is (yet) another of those (damned) mp3 search engines. It may be that someone is *trying* to exploit a known weakness in the Kazaa program, but I doubt it is this CapeCod person... he seems to be merely a typical AA narcissist sponsorial type who need a quota of hero-worship from his followers. I don't get the impression the guy is the sharpest tool in the box... Mack Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You are posting as a guest. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.