fleming Posted June 29, 2005 Share Posted June 29, 2005 I keep getting "attacked" with the LovaSan and most recently the LSASS Exploit.It's weird cause it all of a sudden happened, and Kaspersky is telling me it's rejected it, which is great. My question is this:It tells me the IP Address, is there any way i can find out where, or who it's coming from?Because the LoveSan is a mass-mailing virus, i thought maybe i can see if some friends are sending it out.I changed my Kaspersky settings to stealth, and to block the system that sends the virus for 60 minutes, and so far i haven't been hit. My system is up to date, and i have done 2 virus checks, so i seem to be good, I am just trying to see if i can see where it's coming from, with only the IP address.I am sure it just keeps changing itself so it's impossible, but i thought iwould ask.thanks for any help.Fleming Link to comment Share on other sites More sharing options...
maxamoto Posted June 29, 2005 Share Posted June 29, 2005 I keep getting "attacked" with the LovaSan and most recently the LSASS Exploit.It's weird cause it all of a sudden happened, and Kaspersky is telling me it's rejected it, which is great. My question is this:It tells me the IP Address, is there any way i can find out where, or who it's coming from?Because the LoveSan is a mass-mailing virus, i thought maybe i can see if some friends are sending it out.I changed my Kaspersky settings to stealth, and to block the system that sends the virus for 60 minutes, and so far i haven't been hit. My system is up to date, and i have done 2 virus checks, so i seem to be good, I am just trying to see if i can see where it's coming from, with only the IP address.I am sure it just keeps changing itself so it's impossible, but i thought iwould ask.thanks for any help.Fleming<{POST_SNAPBACK}>You can try plugging the IP addy into www.samspade.org, but I doubt anything will come of it, just because ISPs really don't care about that kind of thing... Link to comment Share on other sites More sharing options...
spud Posted June 29, 2005 Share Posted June 29, 2005 Tools like Visual Route can help you figure out where in the world they are coming from.online tool Hexillian is usefull for finding out domain information i.e. ISP info, who owns the IP, who to send abuse reports to etc. Or try SamSpade same again just different layout, they also have a tool you can download Link to comment Share on other sites More sharing options...
fleming Posted June 29, 2005 Author Share Posted June 29, 2005 thanks guys, will check them out!Fleming Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now