It all depends, what are they trying to do? Gain access to the server or is someone just emailing you virus's

Both last night...



I was getting a shite load of viruses and my server told me they were trying

to get it.



I was able to track them and get their name, does their name have any value? I also have their computer number and where in the world they are, or is this info bunk?

Its all good, I just keep on https://www.nopistons.com/forums/pub...1047683473.gif

it depends on what it is they are doing, if you have the source ip address of the connections being used for whatever you suspect is some form of attack... they can very likely be useless. Often people will use remote systems to attack others, so you might just have the source address of another compromised host... which would require you to contact the administrator of that host and they would have to find out where those connections are coming form and so on until the true origin is found.

Thanks Pengaru---Sounds like I should just keep my guns up.. Thanks though

Odds are it's junk and they are just using a proxy or something to move around.

just put in a reverse proxy, and you'll get rid of most of the problems.. actually.

if you're running microsuck, swap to a unix based system and some unix sec guides, probably alot easier.

no patches on a regular basis, etc.



works for me. https://www.nopistons.com/forums/pub...DIR#>/wink.png

Nope....I have met two in my life. Really wierd people. They see it as a challenge and they wont stop until they do what they wanted to. It sad that people would want to do that. Both of the guys I knew used it for good and went out and got real jobs that pay them really well now.

Odds are it's junk and they are just using a proxy or something to move around. [/quote]

open proxy servers piss me off, so many of our servers get flooded by distributed attacks based on open proxy lists.



the other day I blocked more than 1000 addresses from a server that were hosts running open http proxy software getting used in an attack.



most of the addresses were on cable, morons with NT boxes probably not even aware they are running a public proxy.