Notices
Site Suggestions & Problems Bring up any suggestions, questions or problems concerning ClubLexus. If you need to test a forum feature, post here too. Note - questions about your Lexus do not belong in this forum!

Tons of Hacker Attacks on this Form.

Thread Tools
 
Search this Thread
 
Old Jan 12, 2003 | 12:03 AM
  #1  
ceoart's Avatar
ceoart
Thread Starter
Pole Position
 
Joined: Mar 2001
Posts: 397
Likes: 0
From: Alabama
Thumbs down Tons of Hacker Attacks on this Forum

I use BlackIce Defender to guard against Hacker Attacks. This forum gets more than anyone I have every been to. Better invest in a good Firewall to view this form. Have it set to its highest setting. I hope the Webmaster of this Form starts to look into this. It is really getting bad! :eek:

Last edited by ceoart; Jan 12, 2003 at 03:02 PM.
Reply
Old Jan 12, 2003 | 12:16 AM
  #2  
Daddy-O's Avatar
Daddy-O
Lexus Champion
 
Joined: Apr 2002
Posts: 2,441
Likes: 3
From: North Cackalacky
Default

What form are you talking about? Do you mean forum?

If so, how can your copy of Black Ice tell you how often
this forum is being hacked?
Reply
Old Jan 12, 2003 | 12:18 AM
  #3  
DaveGS4's Avatar
DaveGS4
Administrator Emeritus
20 Year Member
Community Builder
Loved
Community Favorite
iTrader: (2)
 
Joined: Feb 2001
Posts: 31,944
Likes: 2,737
From: North Carolina
Default

Art,

Not sure what you're talking about here... Unless I'm really missing the boat on the way something works, you've got some settings wrong. Do you get the same response every time you click on a certain button or type of link?

I've got Zonealarm running on my home PCs as well as a hardware firewall in my router. I've used both Blackice and Zonealarm on my work laptop - never had the problems you're talking about. Something is set incorrectly.

Try surfing some other forums that use the same software as clublexus and see if you get the same errors. I think www.avsforum.com uses the same vbb.
Reply
Old Jan 12, 2003 | 12:21 AM
  #4  
LOTC's Avatar
LOTC
VIP 様式
 
Joined: Feb 2001
Posts: 4,410
Likes: 2
From: California
Default

Originally posted by DaveGS4
Art,

Not sure what you're talking about here... Unless I'm really missing the boat on the way something works, you've got some settings wrong. Do you get the same response every time you click on a certain button or type of link?

I've got Zonealarm running on my home PCs as well as a hardware firewall in my router. I've used both Blackice and Zonealarm on my work laptop - never had the problems you're talking about. Something is set incorrectly.

Try surfing some other forums that use the same software as clublexus and see if you get the same errors. I think www.avsforum.com uses the same vbb.
I also use Zonealarm and I get ditto from this site.
Reply
Old Jan 12, 2003 | 12:29 AM
  #5  
Daddy-O's Avatar
Daddy-O
Lexus Champion
 
Joined: Apr 2002
Posts: 2,441
Likes: 3
From: North Cackalacky
Default

art,

...or are you trying to say that the CL web site
is performing hacker attacks on your PC?

I use zonealarm and no problems here.
Reply
Old Jan 12, 2003 | 01:09 AM
  #6  
bitkahuna's Avatar
bitkahuna
CL Community Team
iTrader: (20)
 
Joined: Feb 2001
Posts: 80,472
Likes: 3,828
Default

Perhaps they're getting cookie update requests and thinking they're hacks.
Reply
Old Jan 12, 2003 | 01:55 AM
  #7  
ceoart's Avatar
ceoart
Thread Starter
Pole Position
 
Joined: Mar 2001
Posts: 397
Likes: 0
From: Alabama
Question

I did not say any of the Hacker attacks was coming from anyone who operates this form. But someone seeing if peoples computers are vulnerable. If you guys don't see anything then you very well might be a subject of an attack. I use the latest version of BlackIce version 3.5 ceh. Believe me set your security setting higher especially if you have an ADSL connection. Funny the hacker attacks suddenly stopped now. So it could be a member of one of these forms doing this.
Reply
Old Jan 12, 2003 | 02:11 AM
  #8  
awj's Avatar
awj
Bluegr*** Performance
 
Joined: Feb 2002
Posts: 1,532
Likes: 0
From: North Kentuckarolinay
Default

I used to receieve a lot e-mail viruses from supraforums, if that is what you are gettting at. To guard yourself, I found it is best to make your e-mail nonpublic.
Reply
Old Jan 12, 2003 | 12:18 PM
  #9  
UTGS400's Avatar
UTGS400
Instructor
20 Year Member
Photogenic
 
Joined: Apr 2002
Posts: 957
Likes: 13
From: Texas
Default

I have the latest version of black ice and I don't have any problems.
Reply
Old Jan 12, 2003 | 02:44 PM
  #10  
ceoart's Avatar
ceoart
Thread Starter
Pole Position
 
Joined: Mar 2001
Posts: 397
Likes: 0
From: Alabama
Thumbs down

Originally posted by UTGS400
I have the latest version of black ice and I don't have any problems.

You mean to tell me you don't get any alerts from Blackice?

Here is one attack I just received when I went on this forum.
Count 3
1/12/2003 1:27:48 PM, TCP port probe, AC97C474.ipt.aol.com, 3
IP: 172.151.196.116
DNS: AC97C474.ipt.aol.com

The count just went up to 6 at 1:37:36 PM with the above Hacker on this forum :eek:

Time, Event, Intruder, Count 3
1/12/2003 1:47:18 PM, SQL port probe, pD9587DF5.dip.t-dialin.net, 3
IP: 217.88.125.245
DNS: pD9587DF5.dip.t-dialin.net

Time, Event, Intruder, Count 2
1/12/2003 1:48:16 PM, TCP port probe, AC97C474.ipt.aol.com, 2

Last edited by ceoart; Jan 12, 2003 at 03:06 PM.
Reply
Old Jan 12, 2003 | 09:06 PM
  #11  
UTGS400's Avatar
UTGS400
Instructor
20 Year Member
Photogenic
 
Joined: Apr 2002
Posts: 957
Likes: 13
From: Texas
Default

Yes, I mean to tell you I don't get any alerts. Maybe you have the protection level set too high. Keep in mind you are logged on to the CL server and cookies are being sent to your computer. If the setting are too high, black ice will think you are being attacked when in reality a cookie is being stored on your computer.

What protection level are you running? I have mine on "nervous" and have no problems.

Last edited by UTGS400; Jan 12, 2003 at 09:07 PM.
Reply
Old Jan 13, 2003 | 09:46 PM
  #12  
MrIan's Avatar
MrIan
Lexus Test Driver
 
Joined: Sep 2001
Posts: 1,031
Likes: 0
From: Texas
Default

Thanks for the zonealert info guys!
Installed last night and already have 26 intrusions blocked with 13 of those being high rated. Thanks again guys! Maybe i won't have to format so often anymore!
Reply
Old Jan 13, 2003 | 09:50 PM
  #13  
bitkahuna's Avatar
bitkahuna
CL Community Team
iTrader: (20)
 
Joined: Feb 2001
Posts: 80,472
Likes: 3,828
Default

Originally posted by ceoart
Here is one attack I just received when I went on this forum.
Count 3
1/12/2003 1:27:48 PM, TCP port probe, AC97C474.ipt.aol.com, 3
IP: 172.151.196.116
DNS: AC97C474.ipt.aol.com

The count just went up to 6 at 1:37:36 PM with the above Hacker on this forum :eek:

Time, Event, Intruder, Count 3
1/12/2003 1:47:18 PM, SQL port probe, pD9587DF5.dip.t-dialin.net, 3
IP: 217.88.125.245
DNS: pD9587DF5.dip.t-dialin.net

Time, Event, Intruder, Count 2
1/12/2003 1:48:16 PM, TCP port probe, AC97C474.ipt.aol.com, 2
I think you're seeing CL check to see if you have AIM loaded.
Reply
Old Jan 19, 2003 | 05:30 PM
  #14  
SandRock's Avatar
SandRock
Lead Lap
 
Joined: Dec 2001
Posts: 673
Likes: 0
From: New Jersey
Default

Originally posted by TruenoHatchiRok
Thanks for the zonealert info guys!
Installed last night and already have 26 intrusions blocked with 13 of those being high rated. Thanks again guys! Maybe i won't have to format so often anymore!
If you do a disk image it will cut the time way down to get back up.
Reply




All times are GMT -7. The time now is 09:40 AM.