HELP! My IP is being BOMBED!!

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
This morning I noticed my "busy" light on my modem was staying steady, and my internet was really slowing down, but I wasn't downloading anything. I had Zonealarm at the time, and when I'd hit the "stop all activity" button the number of intrusion attempts would go through the roof, it would count super fast.

I called my ISP and told them, and he said to leave my modem unplugged for an hour or so to get another IP assigned to it automatically. Well, I did that, to no avail. I went to sleep, 3 hours later woke up and plugged the modem back in, and I keep getting the same IP. I uninstalled zonealarm and installed a trail version of a real powerful firewall, and it's showing each attempt to hack into my computer being from a different IP!! I did "whoisview" on a couple of the IP's and they came back to Sweeden and Canada! They are all very different!

What the heck is going on? In 15 days I'll have to spend 40 bucks to register my new firewall, but it's keeping the hacks at bay and my internet is back up to normal speed.

This was after allowing the autoinstall of IE 7.0 to occur, and after downloading a new version of Bittorrent. I tried using restore, but suddenly have no valid restore points, besides the one the computer made right after this all happened, when I first tried to restore it.

The number of intrusion attemps has gone from 16/sec this morning to about 3 per second.

Please help!!
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!

So you've unplugged the power to the modem and turned the pc off, right? If it's a cable modem, try disconnecting the coaxl cable as well. That is what I had to do when my server died and had to use another computer.

Have you tried ipconfig /release and renew ?
 

BoatBuoy

Rear Admiral
Joined
May 29, 2004
Messages
4,856
Re: HELP! My IP is being BOMBED!!

From a command prompt run ipconfig /all. Notice the lease "Lease Expires" date/time. When you shut down as instructed by the tech, the date/time must pass before you will stand a chance of getting a new ip address. Also before you shut down, run ipconfig /release (not renew). When you restart, a request will be made to the DHCP server for an IP and hopefully you'll get a different one.
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

Thanks guys. I will definitely do that.

Boat, I can't run IPconfig, ok I can, but I don't see anything. I just get a black box flashing real fast, too fast to read.

Know a way to access the ipconfig stuff and actually have it stay on the screen longer than the average human blink? I do believe running ipconfing/ release, whether or not I can read it or not, will actually work. I'll certainly try it.
 

BoatBuoy

Rear Admiral
Joined
May 29, 2004
Messages
4,856
Re: HELP! My IP is being BOMBED!!

Run cmd.exe. That should give you a command prompt window.
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

Thanks, that solved one problem, but whenever I do IPrelease it releases, but whenever I reboot I get the same IP address. It happened twice, and I'm on cable, not DSL.

Anybody have any other ideas or explanations? The "lease" time never expired of course, as it took a minute to reboot and the lease expired tomorrow at 4 in the afternoon.

If I understand correctly, even using iprelease, I have to wait for the lease to expire before I'll get another IP address? Iprelease won't make the lease expire early, correct? Am I understanding this right? If so, I may have to shut my computer down for a good while then.
 

ndemge

Commander
Joined
Jul 15, 2002
Messages
2,644
Re: HELP! My IP is being BOMBED!!

Your ipconfig /release /renew etc..... this is for your internal network that you are getting from your cable modem... you need to know what ip your cable router is getting, cause that's what they are hitting.

If your support can't help you get that resolved to a new ip, call back and work your way up to level2 support to find someone that can actuall log into their system and do something.
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

Yea, the tech told me they can't do anything unless I have a program that's telling them an IP that's attacking my computer. I have 7000 different IP addresses that have attacked it in the past few hours, pick one and trace it, they trace all over the world.

How do I find out what IP my cable router is getting? I'm a bit neive on this stuff, I don't have a router, just a regular cablemodem coming out the wall. I don't think this is what you're talking about though.
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!

waterinthefuel said:
Thanks, that solved one problem, but whenever I do IPrelease it releases, but whenever I reboot I get the same IP address. It happened twice, and I'm on cable, not DSL.

Anybody have any other ideas or explanations? The "lease" time never expired of course, as it took a minute to reboot and the lease expired tomorrow at 4 in the afternoon.

If I understand correctly, even using iprelease, I have to wait for the lease to expire before I'll get another IP address? Iprelease won't make the lease expire early, correct? Am I understanding this right? If so, I may have to shut my computer down for a good while then.

The computer will request that it keep the IP it has at 50% of the time to expire. If you wait the full time and that IP is not givin out, you will get it back. If it is given out, you will get a new IP.

If you complained to your ISP, they should be able to block those IP's at the server level if they are just pinging your IP or trying to hack you.

So yes, you are understanding right.
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!

ndemge said:
Your ipconfig /release /renew etc..... this is for your internal network that you are getting from your cable modem... you need to know what ip your cable router is getting, cause that's what they are hitting.

If your support can't help you get that resolved to a new ip, call back and work your way up to level2 support to find someone that can actuall log into their system and do something.

Depends on his setup. My server gets a real ip and I share the connection from there.

When you do an ipconfig what is the first number you get for an ip address?
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

So plains what is your best suggestion that I do to get a new IP, or maximize my chances of getting a new one? Wait until just prior to halfway to the lease expiration time?
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!

Plainsman said:
ndemge said:
Your ipconfig /release /renew etc..... this is for your internal network that you are getting from your cable modem... you need to know what ip your cable router is getting, cause that's what they are hitting.

If your support can't help you get that resolved to a new ip, call back and work your way up to level2 support to find someone that can actuall log into their system and do something.

Depends on his setup. My server gets a real ip and I share the connection from there.

When you do an ipconfig what is the first number you get for an ip address? Mine is 71.x.x.x (where x is a number)
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

68.xxx.xxx.xxx

I haven't been able to change it.

What is going on? Why am I getting a different IP as the one hacking into my computer, with each attempt? Several times a second!!! What is this guy trying to do? Zonealarm said it was not a high risk hack, so what's he doing, just pinging my IP for the fyck of it?

I've run spybot, adaware and AVG and my computer is clean. It's coming from the outside.
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!

Edit your post to just show the first #.

So your getting a real IP and not an internal IP.

You should be able to call them and have them delete that IP to your computer. And stay on the phone with them until you get a new IP. Or unplug the modem and turn off the computer until it exoires, but you still may get the same IP.
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: HELP! My IP is being BOMBED!!


It could be just a ping of death, slows you down so it's frustrating or doesn't work at all. These folks are losers that do this, IMHO.
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

Hey plain, could you edit your last post to delete my IP? Thanks!

I'm going to work now, so I won't be able to reply anymore.

I'll give you guys an update when I have one!
 

KaGee

Admiral
Joined
Aug 14, 2004
Messages
7,069
Re: HELP! My IP is being BOMBED!!

Your router should have it's IP listed. You can normally enter the router by typing 192.168.0.1 in the IE bar and then go.
 

tommays

Admiral
Joined
Jul 4, 2004
Messages
6,768
Re: HELP! My IP is being BOMBED!!

I have a program that keeps track of everything comeing and going out of my home network and back traces all the attacks

Several hundred minor attacks a day is pretty normal and my hardware firewall fends them off and the software firewall does the rest

China the kid next door you name it :(

A naked copy of XP will hold up about 3 minutes to worm attacks

Tommays
 

Xcusme

Commander
Joined
Apr 21, 2003
Messages
2,888
Re: HELP! My IP is being BOMBED!!

KaGee said:
Your router should have it's IP listed. You can normally enter the router by typing 192.168.0.1 in the IE bar and then go.

I think that's the problem...there's no router....only a modem.
 

waterinthefuel

Commander
Joined
Nov 15, 2003
Messages
2,728
Re: HELP! My IP is being BOMBED!!

Trust me, this isn't a normal amount. It was about 3000 a minute, now I get about 100 a minute, all with different IP's.

It started suddenly, someone got my IP and won't let it go.

I just checked it, and I'm at 3200 so far today, but it's slowing down to about 1 every 5 seconds or so.
 
Top