The ABC Homeopathy Forum
Yesterday I got record below attack on my p.c
12:19:18 AM Port scan 67.19.8.43 TCP (1370, 1373, 1376, 1377, 1372, 1371)12:19:18 AM Rst attack 67.19.8.43 -> 67.19.8.43
I have almost a full proof system and my p.c blocked host(which was abc incidently!!!)for the timebeing.My question is why this happened?Mods I request a reply on how host tried to do a scan on my p.c!Just for my knowledge.
turningpoint on 2006-10-22
This is just a forum. Assume posts are not from medical professionals.
possible only if attacker has my IP address which is NOT visible in my posts hence I wonder how this attack triggered.Can moderator reply to this query of mine?
turningpoint last decade
I have given you the possible reason. I guess this thing is being done without moderator's knowledge.
♡ maheeru last decade
♡ maheeru last decade
Hello,
I know nothing whatsoever about this. 67.19.8.43 is our IP address, but I'm sure that attack did not orignate here. I'm pretty confident that our system has not been compromised - it's behind a firewall, and even I have very limited access to install anything on the server. I don't know much about this sort of thing, but it's possible the IP is spoofed? Were there any other IPs involved?
Has anybody else expereinced anything similar?
Simon
I know nothing whatsoever about this. 67.19.8.43 is our IP address, but I'm sure that attack did not orignate here. I'm pretty confident that our system has not been compromised - it's behind a firewall, and even I have very limited access to install anything on the server. I don't know much about this sort of thing, but it's possible the IP is spoofed? Were there any other IPs involved?
Has anybody else expereinced anything similar?
Simon
♡ moderator last decade
I have opened a support ticked with hosting tech about this.
What time zone are you in, so I can get tech to look at the logs at the time of the attack? And I presume you're talking about today?
What time zone are you in, so I can get tech to look at the logs at the time of the attack? And I presume you're talking about today?
♡ moderator last decade
I am glad to observe that this matter is being investigated thoroughtly as other computers may also suffer from the same intrusion.
♡ Joe De Livera last decade
I am again pasting my log here dear Simon on your request.
1),12:19:18 AM Port scan 67.19.8.43 TCP (1370, 1373, 1376, 1377, 1372, 1371)
12:19:18 AM Rst attack 67.19.8.43 -> 67.19.8.43
2), 12:19:18 AM Rst attack 67.19.8.43 -> 67.19.8.43
now no.1 is port scan and no.2 is Rst attack from given IP address.
I am in India which u can confirm from my IP address.Thx for showing interest so we can sort out this matter.(this even happened yday our time).
------------------
Copy of my firewall log is-
12:19:40 AM n/a IN REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
1),12:19:18 AM Port scan 67.19.8.43 TCP (1370, 1373, 1376, 1377, 1372, 1371)
12:19:18 AM Rst attack 67.19.8.43 -> 67.19.8.43
2), 12:19:18 AM Rst attack 67.19.8.43 -> 67.19.8.43
now no.1 is port scan and no.2 is Rst attack from given IP address.
I am in India which u can confirm from my IP address.Thx for showing interest so we can sort out this matter.(this even happened yday our time).
------------------
Copy of my firewall log is-
12:19:40 AM n/a IN REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
12:19:37 AM iexplore.exe OUT REFUSED TCP www.abchomeopathy.com HTTP Address 67.19.8.43 blocked because an attack was detected
turningpoint last decade
Hosting tech confirmed that there are no malicious programs and/or data on our server - it appears that our Ip was spoofed and as they say 'there may not be any logical reason why.'
So, to sum up, all we know is that it wasn't us, but someone pretending to be us.
So, to sum up, all we know is that it wasn't us, but someone pretending to be us.
♡ moderator last decade
♡ Joe De Livera last decade
To post a reply, you must first LOG ON or Register
Important
Information given in this forum is given by way of exchange of views only, and those views are not necessarily those of ABC Homeopathy. It is not to be treated as a medical diagnosis or prescription, and should not be used as a substitute for a consultation with a qualified homeopath or physician. It is possible that advice given here may be dangerous, and you should make your own checks that it is safe. If symptoms persist, seek professional medical attention. Bear in mind that even minor symptoms can be a sign of a more serious underlying condition, and a timely diagnosis by your doctor could save your life.