Re: hacker tracking

2017-06-19 Thread Joe
On Mon, 19 Jun 2017 08:00:30 -0700 Mike McClain wrote: > On Sun, Jun 18, 2017 at 08:05:41PM -0500, John Hasler wrote: > > The hits are coming from bots running on cracked computers. The > > botnet operators control them through several layers of indirection. > > > > I suspect that a majority of

Re: hacker tracking

2017-06-19 Thread Mike McClain
On Sun, Jun 18, 2017 at 07:26:01PM -0700, John Conover wrote: > Hi Mike. You are running stateful NAT, (stateful Network Address > Translation on your modem/router,) right? Also, your modem/router > should not be responding to ping(1)/icmp/ident packets since you do > not allow remote/external acc

Re: hacker tracking

2017-06-19 Thread Mike McClain
On Sun, Jun 18, 2017 at 08:05:41PM -0500, John Hasler wrote: > The hits are coming from bots running on cracked computers. The botnet > operators control them through several layers of indirection. > > I suspect that a majority of the Windows boxes in the world may be under > the control of botnet

Re: hacker tracking

2017-06-18 Thread John Conover
Hi Mike. You are running stateful NAT, (stateful Network Address Translation on your modem/router,) right? Also, your modem/router should not be responding to ping(1)/icmp/ident packets since you do not allow remote/external access. Might try: https://www.grc.com/x/ne.dll?bh0bkyd2 for start

Re: hacker tracking

2017-06-18 Thread John Hasler
The hits are coming from bots running on cracked computers. The botnet operators control them through several layers of indirection. I suspect that a majority of the Windows boxes in the world may be under the control of botnets. -- John Hasler jhas...@newsguy.com Elmwood, WI USA