Trojan Horses????????????//

[Cameron203]

IP Addresses
Hey i am currently running norton 2002 and frequently displays messages of alert "default backdoor/subseven and then it lists these ip addresses what does this mean? and how can i tell who these people are trying to access my comp.

24.91.62.252
24.37.177.202
65.12.104.103
24.183.133.59



Report this post to a moderator | IP: Logged

11-24-2001 02:49 AM



earthmofo
Regular Member

Registered: Nov 2000
Location: Providence, RI USA
Posts: 122
This should be posted to the Software Forum. Those are @home ip's. Do you have an @home connection?


__________________
"A never ending quest for knowlege as with knowlege comes wisdom"


Report this post to a moderator | IP: Logged

11-24-2001 02:58 AM



Cameron203
Member

Registered: Nov 2001
Location:
Posts: 76
Ip addresses
No I do not
SO why are they trying to access my computer




Can someone explain these alerts i keep getting > trojan horses backdoor subseven the ips are above

How can i find out who is doing this

[blebs]

Official Name: h000094c7bb4c.ne.mediaone.net
IP Address: 24.91.62.252

Official Name: cx745842-a.pnscla1.fl.home.com
IP Address: 24.37.177.202

Official Name: cc1068909-a.folsom1.ca.home.com
IP Address: 65.12.104.103

Official Name: c1168490-a.grapid1.mi.home.com
IP Address: 24.183.133.59

These are most likely, port 27374 or 1243 probes, looking for a trojan on your computer to hook up to and see if they can mess with you. As long as the firewall is blocking entry and you see no outgoing traffic to these addresses, you should be fine. It's quite common and I usually see anywhere from 4 to 10 hits a day from these Sub 7 scans. :)

You can use "Smart Whois" from here, (http://www.all-nettools.com/tools1.htm) to see who to contact concerning these, should you see outgoing traffic.

Unless your computer has assumed some really strange behavior, I would think they are just looking for someone to connect to.