NTL are hacking me
 

Re: NTL are hacking me
 

:welcome: to nthellworld.co.uk Mickmc :)

What type of trafic has it blocked ?

It could be belated dhcp or dns acks that have set off the alarm....

Can you post the log please.

Re: NTL are hacking me
 

Hi, and :welcome: , Ntl are not hacking you, you need to configure your firewall to allow certain servers trusted access, See Robon Walkers excellent website, a link is near the bottom of the home page.
Edit. B***Y Hell Stu, you are fast,:pp

Re: NTL are hacking me
 

Hi & Welcome to nthw.

ntl are not attacking you at all. It's more than likely an ntl customer with a PC that hasn't been properly protected, & is infected with a virus/trojan that is sending out traffic to random I.Ps.

Not much you can do really except make sure that you have a decent firewall, & make sure your O/S is fully patched up. :)

Re: NTL are hacking me
 

Thanks folks but this happened repeatedly yesterday and has again happened twice today. Why would anyone from NTL want to access my computer?

Re: NTL are hacking me
 

You need to post the details m8...... There are thousands if not millions of diferent types of attack's.....

See if you can post the event log or at least give the details of the scan/probe.

Re: NTL are hacking me
 

They wouldn't.

As I said it probably a user whose PC is infected, & they don't even know about it.

Re: NTL are hacking me
 

Details:

Attempted Intrusion "HTTP_IIS_ISAPI_Extension" against your machine was detected and blocked
Intruder: 62.254.0.12(16370)
Risk Level: High
Protocol: TCP
Attacked IP: mickmc(**.***.**.***).
Attacked Port: http(80)
Click on the address to trace the attacker You can get detailed information about this attack at Symantec Security Response

[Edit]-I've removed your I.P address, Neil.

Re: NTL are hacking me
 

Dont you all think this is suss

Re: NTL are hacking me
 

What port is the attack hitting. I have one US based IP that has hit my firewall 129 times in the past week mainly port 1026, this is almost certainly a virus infected PC.
Edit . Port 80. looks like Neil is correct, don't worry about it, just think of it as a burglar that has walked past your house and left you alone because you have an alarm fitted.

Re: NTL are hacking me
 

Are you running a web server ? If not then this is nothing to worry about.

Its an expliot for IIS servers - http://www.microsoft.com/technet/sec...n/MS01-033.asp

If your firewall has blocked it then you dont have a problem...

The request apears to have orinated from an NTL proxy.. Someone may be using the proxy to relay the scan.

Re: NTL are hacking me
 

As Neil said, it's probably just a customer with an infected PC. He or she may not even be aware that they are doing it. These things happen nowadays. At one point, my firewall was getting hit 100 times a day by virus infected PCs.

If you are concerned, send a copy of your logs to abuse@ntlworld.com. They can track the user down, and warn him or her.

Re: NTL are hacking me
 

How are they going to track down the user when the reported IP is a proxy server ?

Re: NTL are hacking me
 

Well thanks for all the reassurance folks. You have all been great.

Re: NTL are hacking me
 

You posted while I was typing that..

Anyway, surely it depends if the proxy is logged?