🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: uk.rec.motorcycles
12 messages
12 total messages Started by "Hog" Tue, 07 Oct 2003 20:03
Backdoor/Subseven
#99490
Author: "Hog"
Date: Tue, 07 Oct 2003 20:03
12 lines
398 bytes
One of my firewalls, on the internet connection, keeps shouting about
external access attempts from this Trojan and has done for a few days now.
BT provides a dynamic IP service so HTF does some cunt keep picking me up?
I drop it several times a day.
The connection is tied down hard AFAIK.

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Re: Backdoor/Subseven
#99494
Author: "Cane"
Date: Tue, 07 Oct 2003 20:07
19 lines
664 bytes
"Hog" <hogTIED@ukrm.net> wrote in message
news:blv2n7$gqega$1@ID-105725.news.uni-berlin.de...

> One of my firewalls, on the internet connection, keeps shouting about
> external access attempts from this Trojan and has done for a few days now.
> BT provides a dynamic IP service so HTF does some cunt keep picking me up?
> I drop it several times a day.
> The connection is tied down hard AFAIK.

It's me. I'm trying to hack your HD ;)

--
cane [at] ukrm.org ¦ fireblade, r30
botafo t#50 f#03 YTC #15 bbb #6 pm #6 apostle [kotl] flo#12[with bar]
New? http://www.ukrm.net/faq/ukrmscbt.html
Rideout? http://www.horrible.demon.co.uk/botafof/
"Suckling the Mender"


Re: Backdoor/Subseven
#99498
Author: "Hog"
Date: Tue, 07 Oct 2003 20:08
21 lines
622 bytes
Cane wrote:
> "Hog" <hogTIED@ukrm.net> wrote in message
> news:blv2n7$gqega$1@ID-105725.news.uni-berlin.de...
>
> > One of my firewalls, on the internet connection, keeps shouting
> > about external access attempts from this Trojan and has done for a
> > few days now. BT provides a dynamic IP service so HTF does some
> > cunt keep picking me up? I drop it several times a day.
> > The connection is tied down hard AFAIK.
>
> It's me. I'm trying to hack your HD ;)

Hemorrhoids?
Oooo I could do with some of that.

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Re: Backdoor/Subseven
#99499
Author: Ben
Date: Tue, 07 Oct 2003 20:09
19 lines
796 bytes
On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:

>One of my firewalls, on the internet connection, keeps shouting about
>external access attempts from this Trojan and has done for a few days now.
>BT provides a dynamic IP service so HTF does some cunt keep picking me up?
>I drop it several times a day.
>The connection is tied down hard AFAIK.

Someone else one the same subnet as you is infected and it's trying to
propagate.

I have a similar thing with cable, in fact the activity light is on
constantly these days, despite nothing coming through the firewall,
and no load.
--
          DIAABTCOD#11 BOTAFOT#75 ex-two#19
    "We take these risks, not to escape from life,
       but to prevent life escaping from us."
********* replace 'spam' with 'ben' to reply ********
Re: Backdoor/Subseven
#99523
Author: "Hog"
Date: Tue, 07 Oct 2003 20:56
24 lines
765 bytes
Ben wrote:
> On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:
>
>> One of my firewalls, on the internet connection, keeps shouting about
>> external access attempts from this Trojan and has done for a few
>> days now. BT provides a dynamic IP service so HTF does some cunt
>> keep picking me up? I drop it several times a day.
>> The connection is tied down hard AFAIK.
>
> Someone else one the same subnet as you is infected and it's trying to
> propagate.
>
> I have a similar thing with cable, in fact the activity light is on
> constantly these days, despite nothing coming through the firewall,
> and no load.

Ah good thought! thanks

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Re: Backdoor/Subseven
#99535
Author: steve auvache
Date: Tue, 07 Oct 2003 21:14
24 lines
752 bytes
Ben wrote
>On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:
>
>>One of my firewalls, on the internet connection, keeps shouting about
>>external access attempts from this Trojan and has done for a few days now.
>>BT provides a dynamic IP service so HTF does some cunt keep picking me up?
>>I drop it several times a day.
>>The connection is tied down hard AFAIK.
>
>Someone else one the same subnet as you is infected and it's trying to
>propagate.
>
>I have a similar thing with cable, in fact the activity light is on
>constantly these days, despite nothing coming through the firewall,
>and no load.

Same on dial up.

I have to manually disconnect pretty much every connect from midday to
midnight these days.


--
steve auvache
Re: Backdoor/Subseven
#99554
Author: Whinging Courier
Date: Tue, 07 Oct 2003 21:31
16 lines
565 bytes
In uk.rec.motorcycles, Hog said:

>One of my firewalls, on the internet connection, keeps shouting about
>external access attempts from this Trojan and has done for a few days now.
>BT provides a dynamic IP service so HTF does some cunt keep picking me up?
>I drop it several times a day.
>The connection is tied down hard AFAIK.

Someone is scanning a range of IP addresses and your just happens to be
in that range. Don't take it personally, if your firewall is blocking
them it's doing it's job :-)

--
M3EQK
CBR1000FL - No Name yet
GSF600 Bandit - For Sale
Re: Backdoor/Subseven
#99555
Author: antonye
Date: Tue, 07 Oct 2003 21:32
15 lines
450 bytes
Hog wrote:
>
> BT provides a dynamic IP service so HTF does some cunt
> keep picking me up?

They don't. They just cycle through an address range.

--
Antony.                         Far Up! Far Out! Far More!
Ducati 748S-318iSE E46-VTS 16v       Nobody Does it Better
----------------------------------------------------------
I'd rather die peacefully in my sleep like my Grandfather,
than screaming in terror like his passengers.- Jim Harkins


Re: Backdoor/Subseven
#99572
Author: "Hog"
Date: Tue, 07 Oct 2003 21:41
16 lines
302 bytes
antonye wrote:
> Hog wrote:
>>
>> BT provides a dynamic IP service so HTF does some cunt
>> keep picking me up?
>
> They don't. They just cycle through an address range.

Also possible of course

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Re: Backdoor/Subseven
#99676
Author: Doc Gonz0
Date: Tue, 07 Oct 2003 23:22
14 lines
598 bytes
On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:

>One of my firewalls, on the internet connection, keeps shouting about
>external access attempts from this Trojan and has done for a few days now.
>BT provides a dynamic IP service so HTF does some cunt keep picking me up?
>I drop it several times a day.
>The connection is tied down hard AFAIK.

Is it coming from the same IP each time?
--
The Doctor.
*CENSORED* F.C., *CENSORED*, Volkswagen 1600 TL.
TPPFATUICG#1, IMC#1,AC&UFTFCotFFO[tm] #1, ITJWTFO #1,BBIWYMC #2,
GHPOTHUF#3, UKRMHRC#6, DFV #6, YTC #8, DIAABTCOD#9. BOD#8,
Re: Backdoor/Subseven
#99844
Author: "Hog"
Date: Wed, 08 Oct 2003 11:56
20 lines
669 bytes
Doc Gonz0 wrote:
> On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:
>
>> One of my firewalls, on the internet connection, keeps shouting about
>> external access attempts from this Trojan and has done for a few
>> days now. BT provides a dynamic IP service so HTF does some cunt
>> keep picking me up? I drop it several times a day.
>> The connection is tied down hard AFAIK.
>
> Is it coming from the same IP each time?

It seems to come from the same one several times then change.
Traceroutes have varied from Germany to the USA East coast.

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Re: Backdoor/Subseven
#99899
Author: "Hog"
Date: Wed, 08 Oct 2003 14:30
23 lines
791 bytes
Doc Gonz0 wrote:
> On Tue, 7 Oct 2003 20:03:54 +0100, "Hog" <hogTIED@ukrm.net> wrote:
>
>> One of my firewalls, on the internet connection, keeps shouting about
>> external access attempts from this Trojan and has done for a few
>> days now. BT provides a dynamic IP service so HTF does some cunt
>> keep picking me up? I drop it several times a day.
>> The connection is tied down hard AFAIK.
>
> Is it coming from the same IP each time?

Oh I'm annoyed now. Rebooted this machine and WTF...the admin password is
changed and the admin rights pulled from my superuser account. I'm VERY
annoyed. WTF is going on.

Fortunately I had the Linux based tools to change the W2000 passwords.

--
Hog     (remove bondage to email)
'89 R100RS  GSXR1000K2 (sick)
BOB#5  OSOS#31 COFF#22  BOTAFOT#122


Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads