Question: Hackers and Trojans

none | 6/24 | LouD

[LouD]

My firewall software frequently logs attempted penetrations of my computer.

Among the information it captures is the IP address of the offending PC. My question is, can I use this information to counter-attack the hacker, or notify an unwitting computer owner that his PC or server is infected?

How do I go about doing this? I've played with tracer programs before, but never really used the information to follow up.

[LouD]

Sorry about the vanity, but I figured I can count on some FReeper knowledge for this one...

[E. Pluribus Unum]

If you are using a dial-up connection, most of the "hits" you are getting are probably attributable to sites trying to legitimately contact the computer that had the lease on your IP address before it was assigned to you.

[LouD]

My firewall tells me they are Sub7 port scans.

[Abcdefg]

That is a "port scan" and they are done by hackers to see if a trojan will respond. If it does, they can take over your PC.
No trojan - no response is the way I understand it.

[Gaston]

As long as you have your firewall up don't worry about it. Any real hacker will be protected behind a string of several IPs so your search or "counter-attack" will be useless. If you have a static IP and get mass hits (I have gotten them in the hundreds per minuter) log off and dial up again and a new IP will be assigned to your PC.

[dfrussell]

Complaints from people with personal firewalls on their home computers are routinely discarded by ISP abuse departments.

If you want to run one, consider it intellectual masturbation: harmless, pointless and something which other people would rather not discuss with you.

[E. Pluribus Unum]

My firewall tells me they are Sub7 port scans.

Call the Sub7 Port Scan police, 1-900-384-8567.

[Jambe]

If you have a static IP and get mass hits (I have gotten them in the hundreds per minuter) log off and dial up again and a new IP will be assigned to your PC.

This makes no sense at all - If the person has a static IP - that's his/her IP. It doesn't change!

If it's a dynamic IP assigned each time the person connects (dial-up, dsl, wireless, etc.) then it's possible to disconnect, reconnect and obtain a new IP address - but not guaranteed!

[Focault's Pendulum]

Call the Sub7 Port Scan police, 1-900-384-8567.

I just called that number and got a woman on who was asking me if I needed a date....Wow....talk about a great customer service department!

[Gaston]

You are right. Just having another one of my senior moments.

[dglang]

hopefully that was a premature senior moment.