Re: A Question on IP's

[LCB]

Howdy TBBETA:

On 01/24/2000 you may have mentioned:
> 

> Quick Question for you all.
> I am using Wingate with 2 clients.
> Yesterday morning I came down to my server opened Wingate and saw
> a ip
> address connected that is not one of mine
> A hacker maybe?

Early versions of Wingate were used as "jump points" for hackers that
wanted to hide their tracks. Wingate "announced" itself to certain
probes. The hacker would then point their telnet, browser, ftp, etc
applications to the default ports of a discovered Wingate server.
(Most people do not change the ports when it is installed.) An
investigator backtracking a breakin may then look at an innocent
company as the source of the breakin. The simplest way to lessen the
chance of this happening is to change your port assignments from the
default and have your clients point to the new port.

 Cheers,
 Wolfman^J
 [EMAIL PROTECTED]
 icq 2784172

Using The_Bat! 1.39 Beta/1 on a Pentium III - 500Mhz 
running Windows 98 build 



-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

Re[5]: Crash,...

[Wolfgang Kynast]

Hello Wie,

> Maybe  the  solution is 'don't open TB! and other proggie at
> the same time' :-)

have a look at my little starter utility:
http://people.frankfurt.netsurf.de/wky/starter/starter.htm

-- 
Regards,
Wolfgang

Co-moderator TBUDL / TBBETA discussion lists

Using The Bat! 1.39 under Windows 95 4.0 Build   B
in Darmstadt, Germany,
on a 166Mhz Cyrix, 128MB SDRAM, half SCSI system ;-)

http://people.frankfurt.netsurf.de/wky/



-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

Re: Editor Preferences ?

[Christopher J. Trybowski]

Hello tracer,
On Sunday, January 23, 2000 you wrote:

Christopher>> Anyway, this has become VOT. So EOT :-)...
> Third is deltreeing (after moving deltree to the root)
> programfiles/windows.
> BUT problem is that many customers use MS mail and stuff and its so
> easy to loose data...

Well,  the  truth  is, that it's enough to rename win.com to something
else, also rename Program Files and %windir%, and you can install new,
clean  version.  Then you can browse old windows direcotry looking for
everything you might need... That's how I do this.

I'm  considering  another way of doing this, like compressing %windir%
using  jar,  rar,  zip or whatever... This should work to, for simkple
copying files across drives *does* do the trick (checked :)).

OKOK, now this will be EOT (.perhaps :-)) ;-)

best regard,s

-- 
Christopher J. Trybowski 
===
--- [EMAIL PROTECTED] --- [EMAIL PROTECTED] --- uin:4350719 ---
 http://www.trybik.i.krakow.pl --- pgp-keys: 0xB92EEE69 0x9382700B 
===( get-pgp-keys: mailto:[EMAIL PROTECTED]?Subject=send_key )===

Using The Bat! 1.39 [reg] under Windows 98 4.10 build 1998.

-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

Re: A Question on IP's

[tracer]

Hello Timothy Casten,
On Mon, 24 Jan 2000 08:57:35 -0500 GMT your local time,
which was Monday, January 24, 2000, 8:57:35 PM (GMT+0700) my local time,
Timothy Casten wrote:

Timothy> Not really related to BAT but I know yuns are smart guys, lololol

Timothy> Quick Question for you all.
Timothy> I am using Wingate with 2 clients.
Timothy> Yesterday morning I came down to my server opened Wingate and saw
Timothy> a ip
Timothy> address connected that is not one of mine
Timothy> A hacker maybe?
Timothy> I terminated the connection.
Timothy> Is there a way online to look up a IP address?
Timothy> This one was
Timothy> 171.226.93.102

Very likely the dialin modem of a subscriber
make sure you drives arent shared for internet and that you put
passwords on them.
Also do a check on trojans...
And consider a firewall, atguard, Conseal and others work well.

I had silly spammers trying to connect to me (one of the mail
spammers) so as he wanted to ftp me I visited him.
Wasnt even a password on his now ex-website...
His server didnt apreciate finding a 20 mb porn site (g)

For the rest the net is scanned by loads of would be hackers and
normally I kick them off if they pester my system...
Anyway yours  is I think a dialin modem:

America Online (NETBLK-AOL-DTC-DAHA)
   22080 Pacific Blvd
   Sterling, VA 20166
   US

   Netname: AOL-DTC-DAHA
   Netblock: 171.208.0.0 - 171.226.255.255
   Maintainer: AOL

   Coordinator:
  America Online, Inc.  (AOL-NOC-ARIN)  [EMAIL PROTECTED]
  703-265-4670

   Domain System inverse mapping provided by:

   DAHA-01.NS.AOL.COM   152.163.159.233
   DAHA-02.NS.AOL.COM   205.188.157.233

   Record last updated on 17-Dec-1999.
   Database last updated on 24-Jan-2000 05:26:25 EDT.

-- \n

Best regards,
 
tracer

Using theBAT 1.39 

mail to : [EMAIL PROTECTED]
using FireTalk: 321338
LOCAL phone: 271194

-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

Re: A Question on IP's

[Leif Gregory]

Timothy,

It looks like a dynamic IP assigned by an AOL host machine.
Translation: It was most likely someone logged into AOL at that time.
When I tracerouted it, there wasn't anyone using it by then.

If you had the time logged for the time that IP was connected to you,
you could send that to AOL and they might be able to match a user
account. However, they probably won't do much unless you had some form
of proof as to what it was that they were doing.


On Monday, January 24, 2000, at 10:57 PM you wrote:
TC> A hacker maybe?
TC> I terminated the connection.
TC> Is there a way online to look up a IP address?
TC> This one was
TC> 171.226.93.102



A Bajoran Tricorder is fast, accurate & good for hitting peoples heads.

Leif Gregory 

-- 
TBUDL/TBBETA List Moderator
ICQ 216395 <[EMAIL PROTECTED]>
Web Site   
TBUDL FAQ  

PGP Key ID: 
  0x8604279A (DH/DSS)
Fingerprint: 
  9E16 4316 FA42 5DC6 EB1D  D0ED D37A 858A 8604 279A


Using The Bat! 1.39 under Windows 98 4.10 Build  A  
on a Pentium III 500 MHz notebook with 128MB.

Tagline of the day:
A broken Window gets you 7 meg. of bad luck



-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

RE: A Question on IP's

[Rob]

>= Original Message From [EMAIL PROTECTED] =

>Is there a way online to look up a IP address?
>This one was
>171.226.93.102

you can look up IP-addresses with : http://www.arin.net/whois/arinwhois.html
this one is AOL, btw ...  ;-)

are you connected to the Internet for longer times ?? then it's time for a 
firewall, maybe ... like @Guard (NIS2000) or BlackIce.

-- 
Rob

-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

A Question on IP's

[Timothy Casten]

Not really related to BAT but I know yuns are smart guys, lololol

Quick Question for you all.
I am using Wingate with 2 clients.
Yesterday morning I came down to my server opened Wingate and saw
a ip
address connected that is not one of mine
A hacker maybe?
I terminated the connection.
Is there a way online to look up a IP address?
This one was
171.226.93.102

Thanks,

Timm
[EMAIL PROTECTED]


Best regards,
 Timothymailto:[EMAIL PROTECTED]

-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--

Re[5]: Crash,...

[tracer]

Hello MaXxX,
On Mon, 24 Jan 2000 06:54:53 +0100 GMT your local time,
which was Monday, January 24, 2000, 12:54:53 PM (GMT+0700) my local time,
MaXxX wrote:

MaXxX> Hello Kostik,

MaXxX> Monday, January 24, 2000, 1:19:20 AM, you wrote:

W> TB!  1.39  still crash when other proggie opened at the same
W> time. :-(

K>> CONFIRM!

MaXxX> Sometimes, indeed. Often, even.

Never on my system..
And I use dialer 2000 to start manykick many things off at the same time.



Best regards,
 
tracer

Using theBAT 1.39 

mail to : [EMAIL PROTECTED]
using FireTalk: 321338
LOCAL phone: 271194



-- 
--
View the TBBETA archive at http://tbbeta.thebat.dutaint.com
To send a message to the list moderation team double-click HERE:
   
To Unsubscribe from TBBETA, double-click HERE:
   
--