The Bogosity Forum

General Bogosity => General Discussion => Topic started by: Travis Retriever on May 01, 2010, 07:56:35 PM

Title: Attempted computer attacks from this site
Post by: Travis Retriever on May 01, 2010, 07:56:35 PM
For some reason today, about 4/5 times when I try to access this forum via my bookmarks (which has ALWAYS worked before) I am redirected to this URL (DO NOT CLICK IT):
http://www1.protectsys28-pd.xorg.pl/?p=p52dcWpkbG6HjsbIo216h3de0KCfYWCdU9LXoKitioaLw8ydb5aYen5arK3NasiXk2Rea2JrmV2ZVqPajtfZ1m5oWKeih9eipqCecV6aoaXGaorcmpWkcVih1GqZYF6XZJGVm19oY2%2BL08ifb5ytqKhuZ2jYpNuUk5%2BUo6Wh2KaQpKaVk9LW2J5mm6TJxttnopypWqyndWqTZJadZmdmZGte2KCUbWGYZJWbmGhwYm%2BLxMZ2h4dfq6GYdXGaZQ%3D%3D

And I get an error message from my web browser saying it couldn't connect and a message from my anti-virus software telling me it just protected me from an attack.
I look at the details and it was actually targeted to my name.
I suspect this forum is having trouble with hackers and/or someone has a grudge against me...
Has anyone else had this problem?
Title: Re: Attempted computer attacks from this site
Post by: Travis Retriever on May 01, 2010, 08:04:17 PM
Also, for those interested, here's what my anti-virus software said about the attacker:

Risk Name: "HTTP Misleading Application Page Request"
Attacking Computer: "www1.protectsys28.pd.xorg.pl (94.228.209.182, 80)"
Attacker URL: [already posted above; the really long one]
Destination Address: my computer (duh)
Source Address: "94.228.209.182 (94.228.209.182)"
Traffic Description: "TCP, www-http"

Just to let you all know.
Title: Re: Attempted computer attacks from this site
Post by: Travis Retriever on May 01, 2010, 08:10:33 PM
Update, I only seem to get attacked when trying to access this site if I cleared my browser history beforehand.
Title: Re: Attempted computer attacks from this site
Post by: MrBogosity on May 01, 2010, 08:21:49 PM
Interesting, I'll have to try it.

In the meantime, make sure it's nothing on your end. Run Spybot (or equivalent software), and in case it's DNS poisoning try OpenDNS.
Title: Re: Attempted computer attacks from this site
Post by: MrBogosity on May 01, 2010, 08:23:11 PM
Yep, I got the same thing in both Chrome and Safari. Checking it out...
Title: Re: Attempted computer attacks from this site
Post by: MrBogosity on May 01, 2010, 09:41:33 PM
Okay, everything's refreshed from clean backups. Let me know if it happens again, or if any functionality is diminished.
Title: Re: Attempted computer attacks from this site
Post by: Travis Retriever on May 01, 2010, 10:03:58 PM
Thank goodness!
Glad to know that's resolved. :)
Title: Re: Attempted computer attacks from this site
Post by: Gumba Masta on May 01, 2010, 11:30:25 PM
Interesting.
So I was'nt the only one. Only I got a virus warning from AVG when trying to watch the Bogosity videos from the main homepage.

Oh and it's good to see you people still breathing and such things.
Title: Re: Attempted computer attacks from this site
Post by: valvatica on May 02, 2010, 01:14:47 AM
Quote from: Gumba Masta on May 01, 2010, 11:30:25 PM
Interesting.
So I was'nt the only one. Only I got a virus warning from AVG when trying to watch the Bogosity videos from the main homepage.

Same here. Glad to see it's fixed.
Title: Re: Attempted computer attacks from this site
Post by: MrBogosity on May 02, 2010, 08:34:35 AM
For the record, the attack happened on 5/1/2010 at just after 1:00am. Godaddy has been notified; I don't know what action (if any) they're going to take.