Page 3 of 4 FirstFirst 1234 LastLast
Results 21 to 30 of 34

Thread: major warning!!! web attack in progress

  1. #21
    Join Date
    Feb 2003
    Posts
    4,163
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    hhhmmm....

    I guess you guys didn't see this

    http://www.techjamaica.com/tech_foru...=1532;start=15



  2. #22
    Join Date
    May 2003
    Posts
    3,034
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    I think we need a section for posting warnings and stuff like that. Like a security section. Deffinately.

  3. #23
    Join Date
    Jul 2002
    Posts
    1,388
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    I think everyone who was on the internet today (with xp) has been infected!
    The text is a copy of my firewall log.

  4. #24
    Join Date
    Jul 2002
    Posts
    1,388
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    12/08/2003 11:55:29 PM   Port scanned   208.131.161.90 &nbsp ; TCP(135)
    12/08/2003 11:55:29 PM   Connection request   208.131.161.90 &nbsp ; TCP(135)
    12/08/2003 11:46:03 PM   Port scanned   61.85.124.162    TCP(135)
    12/08/2003 11:46:03 PM   Connection request   61.85.124.162    TCP(135)
    12/08/2003 11:45:55 PM   Port scanned   208.131.161.77 &nbsp ; TCP(135)
    12/08/2003 11:45:55 PM   Connection request   208.131.161.77 &nbsp ; TCP(135)
    12/08/2003 11:37:43 PM   Port scanned   208.131.161.71 &nbsp ; TCP(135)
    12/08/2003 11:37:43 PM   Connection request   208.131.161.71 &nbsp ; TCP(135)
    12/08/2003 11:23:37 PM   Port scanned   208.131.161.53 &nbsp ; TCP(135)
    12/08/2003 11:23:37 PM   Connection request   208.131.161.53 &nbsp ; TCP(135)
    12/08/2003 11:01:42 PM   Port scanned   63.164.166.101 &nbsp ; TCP(135)
    12/08/2003 11:01:42 PM   Connection request   63.164.166.101 &nbsp ; TCP(135)
    12/08/2003 10:57:21 PM   Port scanned   208.131.161.30 &nbsp ; TCP(135)
    12/08/2003 10:57:21 PM   Connection request   208.131.161.30 &nbsp ; TCP(135)
    12/08/2003 10:38:33 PM   Port scanned   208.131.161.13 &nbsp ; TCP(135)
    12/08/2003 10:38:33 PM   Connection request   208.131.161.13 &nbsp ; TCP(135)
    [hr]
    All of those are Anngel users!!

  5. #25
    Join Date
    Apr 2003
    Posts
    13,179
    Rep Power
    30

    Default Re:major warning!!! web attack in progress

    [quote author=newtoo? link=board=1;threadid=1531;start=15#msg14713 date=1060751825]
    I think everyone who was on the internet today (with xp) has been infected![/quote]I'm not infected! And I'm on XP.

    My firewall log is pretty smiliar. A LOT of activity requests on port 135 from other N5 ip addresses. I am getting requests every few minutes 'round the clock on that port. Good 'ole Zonealarm.

  6. #26
    Join Date
    May 2003
    Posts
    383
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    [quote author=YaGGa~2 link=board=1;threadid=1531;start=0#msg14555 date=1060696608]
    s**t..

    Last nite my machine asked me to shutdown like there was no tommorow... giving me some message 'bout "rpc had a critical error and windows needed to restart"

    any a you think this is related...

    i just run an abort (shutdown -a) and ignore it :-\
    [/quote]

    Yes it is,pc's running w2k that were infected by the virus at my work place were experiencing that exact prob. Had to install 2 service pack updates in ordwer to install the patch on w2k

    When I got home monday my little brother told me that once he connected to the net the pc said it was shuttin down.All I did was install firewall..

    I'm running norton's perosnal firewall and it's being holding up quiet well. I haven't install any patches just installed firewall configure to my satisfaction and then connected to the net, updated nav and scanned my machine now I kool as ever.

  7. #27
    Join Date
    Jan 2003
    Posts
    3,004
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    [quote author=newtoo? link=board=1;threadid=1531;start=15#msg14714 date=1060752164]
    12/08/2003 11:55:29 PM Port scanned 208.131.161.90 TCP(135)
    12/08/2003 11:55:29 PM Connection request 208.131.161.90 TCP(135)
    12/08/2003 11:46:03 PM Port scanned 61.85.124.162 TCP(135)
    12/08/2003 11:46:03 PM Connection request 61.85.124.162 TCP(135)
    12/08/2003 11:45:55 PM Port scanned 208.131.161.77 TCP(135)
    12/08/2003 11:45:55 PM Connection request 208.131.161.77 TCP(135)
    12/08/2003 11:37:43 PM Port scanned 208.131.161.71 TCP(135)
    12/08/2003 11:37:43 PM Connection request 208.131.161.71 TCP(135)
    12/08/2003 11:23:37 PM Port scanned 208.131.161.53 TCP(135)
    12/08/2003 11:23:37 PM Connection request 208.131.161.53 TCP(135)
    12/08/2003 11:01:42 PM Port scanned 63.164.166.101 TCP(135)
    12/08/2003 11:01:42 PM Connection request 63.164.166.101 TCP(135)
    12/08/2003 10:57:21 PM Port scanned 208.131.161.30 TCP(135)
    12/08/2003 10:57:21 PM Connection request 208.131.161.30 TCP(135)
    12/08/2003 10:38:33 PM Port scanned 208.131.161.13 TCP(135)
    12/08/2003 10:38:33 PM Connection request 208.131.161.13 TCP(135)
    [hr]
    All of those are Anngel users!!
    [/quote]

    xenocrates was telling me summen about this, i think isp's like c&w and n5 renew ur ip address.
    when i am online i keep getting a message from zone alarm pro saying that someone with a c&w email address was blocked, when i checked the details, it turned out to be a guy who seems to work for c&w, i got info like his email address, C&w info like location, and department.
    this couldnt be someone with bad intentions,a hacker per say, because he would be darn stupid. i traced the location with zone alarm and it was coming from Kingston.

    this leaves me to think that the renewing of the ip address is what causes things like this to happen.

    Correct me if i am wrong

  8. #28
    Join Date
    May 2003
    Posts
    2,546
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    very good point mitchie.....yes when they reconnect, they get a new addy, which is why i said you should log the ip and the 'time' and send of to the isp contact email. they will then tell the user to fix their comp.

  9. #29
    Join Date
    Jun 2003
    Posts
    55
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    thank god for my vpn and checkpoint, the worm did pose any probs here.

  10. #30
    Join Date
    May 2003
    Posts
    3,034
    Rep Power
    0

    Default Re:major warning!!! web attack in progress

    [quote author=sweetheartgool link=board=1;threadid=1531;start=15#msg15381 date=1061319016]
    thank god for my vpn and checkpoint, the worm did pose any probs here.
    [/quote]

    U fortunate...
    maybe because youre a guurlllllll :

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •