a hacker

since 9:49 eastern time, someone at ip address 12.239.146.24 has been pinging/hacking my computer. It is now 1:03 pm eastern time. I am getting a notice from my firewall about every 4 minutes with this ip, and it says it comes from Gnutella. I just joined Gnutella a few minutes ago so that maybe I could receive some help on this...I already notified attbi. I was quite surprised to see Gnutella show up on my firewall log today, and it has been constant ever since.
 
I guess I am not being clear...i have NEVER had Gnutella on my computer. I was not connected..ever..until about 2 hours ago to try to get some help for this..this started at 9.49 this morning. No morpeus, no bear share or whatever.
 
Umm if you know his/her IP. you can try the following:

open up a command window (start->run->"command") and ping him (just to **** him off )

Then, if you are running an NT-based windows os (NT/2k/xp) you can type "Net send 12.239.146.24 who are you and what are you doing to my pc?" this will pop up a dialogue on their PC that will say a message (in this case "who are you and what are you doing to my pc?") NOTE: this will only work if they are also running NT/2k/XP.

Apart from that, if your firewall catches it, you ahve nothing to worry about
 
This morning, when I woke up and hit the puter to do some work, my firewall log popped up and told me that an unsolicited computer tried to access mine. It said it was using Gnutella. This continued about everyone 4 minutes or so and is still going on, with the above ip. I spent the morning on the phone with att..they take forever...here is an example of the log...

2002/06/21 12:55:01 12.239.146.24:2327 (12-239-146-24.client.attbi.com) 65.32.40.132:6346 Gnutella

It has truly been annoying.
 
I be no expert on this, but it seems that
someone who runs a gnutella servent has your
IP address in it's queue. This might happen if:

1) You ran a gnutella servent in the recent past.
2) You are on a dialup and someone who had your
IP address in the recent past was running a
gnutella servent...

I.E. Someone's gnutella thinks that you are running gnutella. Happens all the time to me.
I ignore it. A ping is not a Hack and a Hacker
is not a Cracker. (although a Cracker will ping
first to locate you.) If your machine has
it's doors closed & secure, you are safe.

If your doors are open, gnutella is the least
of your worries.........

cheers
jd
 
You have nothing to worry about anyway, this is harmless gnutella traffic. You've said this occured before you installed a gnutella client, understood. But due to DHCP your IP address changes on a fairly regular basis (depending on your connection) and you simply aquired the IP address of someone who had recently been on the gnutella network. No big deal.

BTW, a ping shouldn't scare or **** off anyone, it doesn't do anything. And "your firewall caught it so you're okay" is bullshit, you're okay anyway because you don't have a service listening for traffic on that port (even if you did, it'd most likely be a gnutella client which don't currently have holes to exploit). Noone can just aim a sharply pointed packet at your computer and "hack" it. You must be running some form of server (web, email, ftp, gnutella servent, etc) to receive and process the traffic coming in.

If you're not (*Remote access trojans run as servers, so check for those*) then you don't really have much to worry about (at least not on that front.)
 
read my original post:
since 9:49 eastern time, someone at ip address 12.239.146.24 has been pinging/hacking my computer. It is now 1:03 pm eastern time. I am getting a notice from my firewall about every 4 minutes with this ip, and it says it comes from Gnutella. I just joined Gnutella a few minutes ago so that maybe I could receive some help on this...I already notified attbi. I was quite surprised to see Gnutella show up on my firewall log today, and it has been constant ever since.

I installed nothing...just signed in so that I could join the forum..that's it..created a user name and a password
 
It is normal that you got a lot of alerts while you are connected to the Gnutella net...

These are port scans, pings etc. nothing really serious...

Morgwen
 
Both Morgwen and I listed the possible reasons why you would get a ping or connection request. Please re-read these posts carefully.

It seem that you are upset because someone out in the Internet Cloud initiated some activity with your machine. If that is a problem, you can try to control the whole world, disconnect from the Internet, secure your machine, or relax and enjoy it. Pick one..........

When you drive on the public streets it may annoy you that someone toots their horn within your hearing distance. You may not be doing anything to cause a tooting.

Life's a beach.........

cheers,
jd
 
iriegirl,

When you come somewhere to learn don't start off with such a chip on your shoulder claiming to be victimized. Try to keep a more open mind and you'll meet with much better attitudes.
 
I just don't think that it is a decent thing for a person who has not solicited Gnutella to even have to deal with it..if you don't download it, or visit its sites, you shouldn't have to deal with that...for what I do for a living, I need to have logs up, and having someone pinging me every 4 minutes for what turned out to be 24 hours is ridiculous. Sorry, I don't think that I should have to deal with a file sharing service that I have never asked for.
And the whole "tooting your horn" thing is reducing this situation to the absurd, and false logic. The true analogy would be someone tooting their horn for hours as you drove, then parking outside your house and continuing the tooting.
I don't care how determined someone is to love Gnutella..this is a problem, if random IPs can be victimized.
 
I am behind a firewall and have other security software, so I'm not worried about that, but I would like to know how to stop this. I have never used Gnutella before (not Morpehus or anything else). For some things I am doing I need to keep my firewall log up, and every 4 minutes I get this "ping" or whatever. However it works, it is a nuisance.
 
Most cable systems have the ability to change your IP at any time. It isn't weekly or on some systems not even monthly but it does happen unless you pay for a static IP.

So, you could have picked up a "previously used" IP that was for someone else that was running Gnutella all the time. Remember these IPs are "recycled" because a cable company only gets so many.

Log your IP every day and let us know how often it changes, just for grins that is.

Does anyone know how a cable company can have 130,000 subscribers, each one with his own IP and some of them have TWO or more computers, each assigned their own IP? I have tested this and you can connect 4 computers and each one is assigned it's own "private" IP. I assume some companies will use special boxes to "share" a IP for one house, that will be interesting to see how Gnutella will be if everyone does that.

If you had a IP of say 211.245.XXX.XXX then you would get about 65536 max IPs, but how many cable companies can we support with this? If every cable company was on 211.XXX then we could only support 256 of them, and what about the rest of the net?
 
Back
Top