SeaWolf U-57
01-18-12, 09:38 AM
Ok after last time I know I am going to regret this
but for those who might like to believe me when
I log into Subsim today my firewall came under attack
but once again my cheap crappy virus software (Nod 32)
stopped the attack in its tracks.
here is a pic of the attack
http://img822.imageshack.us/img822/9138/capture2ga.jpg
please take care at this time :shifty:
PPs. and yes I know that some of you that also use Nod32 will not detect anything
that is because the attack has already been submittted and therefore will have no access to your system
SHMF has crash also attack address is shown as
# Query terms are ambiguous. The query is assumed to be:# "n + 192.168.0.7"## Use "?" to get help.# ## The following results may also be obtained via:# http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/nets;q=192.168.0.7?showDetails=true&showARIN=false&ext=netref2# NetRange: 192.168.0.0 (http://cqcounter.com/whois/ip/192.168.0.0.html) - 192.168.255.255 (http://cqcounter.com/whois/ip/192.168.255.255.html)CIDR: 192.168.0.0/16OriginAS: NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVEDNetHandle: NET-192-168-0-0-1Parent: NET-192-0-0-0-0NetType: IANA Special UseComment: This block is used as private address space.Comment: Traffic from these addresses does not come from IANA.Comment: IANA has simply reserved these numbers in its database Comment: and does not use or operate them. We are not the source Comment: of activity you may see on logs or in e-mail records.Comment: Please refer to http://www.iana.org (http://cqcounter.com/whois/domain/iana.org.html)/abuse/Comment: Comment: Addresses from this block can be used by Comment: anyone without any need to coordinate with Comment: IANA or an Internet registry. Addresses fromComment: this block are used in multiple, separately Comment: operated networks.Comment: Comment: This block was assigned by the IETF in theComment: Best Current Practice document, RFC 1918Comment: which can be found at:Comment: Comment: http://www.rfc-editor.org (http://cqcounter.com/whois/domain/rfc-editor.org.html)/rfc/rfc1918.txtRegDate: 1994-03-15Updated: 2011-04-12Ref: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/net/NET-192-168-0-0-1 OrgName: Internet Assigned Numbers AuthorityOrgId: IANAAddress: 4676 Admiralty Way, Suite 330City: Marina del ReyStateProv: CAPostalCode: 90292-6695Country: USRegDate: Updated: 2004-02-24Ref: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/org/IANA OrgTechHandle: IANA-IP-ARINOrgTechName: Internet Corporation for Assigned Names and NumberOrgTechPhone: +1-310-301-5820 OrgTechEmail: abuse@iana.org (http://cqcounter.com/whois/domain/iana.org.html)OrgTechRef: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/poc/IANA-IP-ARIN
http://img835.imageshack.us/img835/8098/capture3jq.jpg
Ok this might have not been from subsim but maybe a direct attack at SHMF and its members from well lets not say anymore for now
Although it happened when visiting subsim but my firewall might of already been blocking the attack and only showed the message while browsing Subsim ?????
but for those who might like to believe me when
I log into Subsim today my firewall came under attack
but once again my cheap crappy virus software (Nod 32)
stopped the attack in its tracks.
here is a pic of the attack
http://img822.imageshack.us/img822/9138/capture2ga.jpg
please take care at this time :shifty:
PPs. and yes I know that some of you that also use Nod32 will not detect anything
that is because the attack has already been submittted and therefore will have no access to your system
SHMF has crash also attack address is shown as
# Query terms are ambiguous. The query is assumed to be:# "n + 192.168.0.7"## Use "?" to get help.# ## The following results may also be obtained via:# http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/nets;q=192.168.0.7?showDetails=true&showARIN=false&ext=netref2# NetRange: 192.168.0.0 (http://cqcounter.com/whois/ip/192.168.0.0.html) - 192.168.255.255 (http://cqcounter.com/whois/ip/192.168.255.255.html)CIDR: 192.168.0.0/16OriginAS: NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVEDNetHandle: NET-192-168-0-0-1Parent: NET-192-0-0-0-0NetType: IANA Special UseComment: This block is used as private address space.Comment: Traffic from these addresses does not come from IANA.Comment: IANA has simply reserved these numbers in its database Comment: and does not use or operate them. We are not the source Comment: of activity you may see on logs or in e-mail records.Comment: Please refer to http://www.iana.org (http://cqcounter.com/whois/domain/iana.org.html)/abuse/Comment: Comment: Addresses from this block can be used by Comment: anyone without any need to coordinate with Comment: IANA or an Internet registry. Addresses fromComment: this block are used in multiple, separately Comment: operated networks.Comment: Comment: This block was assigned by the IETF in theComment: Best Current Practice document, RFC 1918Comment: which can be found at:Comment: Comment: http://www.rfc-editor.org (http://cqcounter.com/whois/domain/rfc-editor.org.html)/rfc/rfc1918.txtRegDate: 1994-03-15Updated: 2011-04-12Ref: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/net/NET-192-168-0-0-1 OrgName: Internet Assigned Numbers AuthorityOrgId: IANAAddress: 4676 Admiralty Way, Suite 330City: Marina del ReyStateProv: CAPostalCode: 90292-6695Country: USRegDate: Updated: 2004-02-24Ref: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/org/IANA OrgTechHandle: IANA-IP-ARINOrgTechName: Internet Corporation for Assigned Names and NumberOrgTechPhone: +1-310-301-5820 OrgTechEmail: abuse@iana.org (http://cqcounter.com/whois/domain/iana.org.html)OrgTechRef: http://whois.arin.net (http://cqcounter.com/whois/domain/arin.net.html)/rest/poc/IANA-IP-ARIN
http://img835.imageshack.us/img835/8098/capture3jq.jpg
Ok this might have not been from subsim but maybe a direct attack at SHMF and its members from well lets not say anymore for now
Although it happened when visiting subsim but my firewall might of already been blocking the attack and only showed the message while browsing Subsim ?????