Jump to content
SAU Community

Recommended Posts

why dont you put Windows 7 Enterprise on it with a 90 day free trial with internet activation that will give you more than enough time to do what you need to in a better environment than vista

http://technet.microsoft.com/en-us/evalcenter/cc442495

why dont you put Windows 7 Enterprise on it with a 90 day free trial with internet activation that will give you more than enough time to do what you need to in a better environment than vista

http://technet.microsoft.com/en-us/evalcenter/cc442495

QFT. Vista sucks.

-D

Would love too upgrade it but can't.

I've been trying to use my own laptop with Windows 7 on it for some of the work and it just doesn't communicate well enough with our other computers and sensors in the unit as they aren't programed for it.

My work is f**king retarted to even be using Vista as only XP and 2000 have been tested proporly with our equipment and proven to work.

Think I might have sorted it out though.

  • 4 weeks later...

My internet has been playing up tonight somewhat (but was working through the period below) .... not sure if my internet disconnections are an Adam Wimax issue or what ... but checking through my modem log I came across these:

Thursday, 15 December 2011 9:04:04 PM Blocked access attempt from 212.34.104.8:1706 to TCP port 445

Thursday, 15 December 2011 9:04:06 PM Blocked access attempt from 212.34.104.8:1706 to TCP port 445

Thursday, 15 December 2011 9:05:54 PM Blocked access attempt from 84.237.162.93:4574 to TCP port 445

Thursday, 15 December 2011 9:05:57 PM Blocked access attempt from 84.237.162.93:4574 to TCP port 445

Thursday, 15 December 2011 9:08:46 PM Blocked access attempt from 222.189.238.115:6000 to TCP port 3306

Thursday, 15 December 2011 9:10:32 PM Blocked access attempt from 94.67.201.65:1040 to TCP port 445

Thursday, 15 December 2011 9:10:35 PM Blocked access attempt from 94.67.201.65:1040 to TCP port 445

Thursday, 15 December 2011 9:16:37 PM Blocked access attempt from 90.156.201.106:80 to TCP port 2386

Thursday, 15 December 2011 9:16:40 PM Blocked access attempt from 90.156.201.106:80 to TCP port 2386

Thursday, 15 December 2011 9:18:24 PM Blocked access attempt from 208.248.77.132:80 to TCP port 48623

Thursday, 15 December 2011 9:22:41 PM Blocked access attempt from 60.172.22.77:6000 to TCP port 1433

Thursday, 15 December 2011 9:24:34 PM Blocked access attempt from 187.59.151.131:4638 to TCP port 23

Is this normal, or is someone tring to hack me? And no, I had no Torrents or anything downloading at the time.

My internet has been playing up tonight somewhat (but was working through the period below) .... not sure if my internet disconnections are an Adam Wimax issue or what ... but checking through my modem log I came across these:

<snip>

Is this normal, or is someone tring to hack me? And no, I had no Torrents or anything downloading at the time.

Thats a distributed denial of service attack (DDoS) - your firewall is doing the right thing in blocking it.

Mind you your firewall is only catching a portion of them. Looking at the port numbers indicates they're fishing for weaknesses so the firewall is only going to notice any ports its setup to notice. Its not uncommon to be randomly probed by many hosts on all ports from 0-65536 or whatever the upper level is

-D

Thanks Ben, that's what I thought.

BUT, I have rebooted my modem around 6 times tonight, so (I presume - I haven't kept an eye on it) my Adam-assigned IP keeps changing - how would they know to keep attacking me when my IP changes? I had a look and those IPs are from all over the place, Taiwan, Costa rice, Russia .... I assume they got my IP from downloading Torrents, but like I said my IP with Adam is not static, and changes all the time .....

Thanks Ben, that's what I thought.

BUT, I have rebooted my modem around 6 times tonight, so (I presume - I haven't kept an eye on it) my Adam-assigned IP keeps changing - how would they know to keep attacking me when my IP changes? I had a look and those IPs are from all over the place, Taiwan, Costa rice, Russia .... I assume they got my IP from downloading Torrents, but like I said my IP with Adam is not static, and changes all the time .....

it could be based upon other things, such as mac addresses, or if you have a trojan that reports your ip the same way dyndns does. What you need to do is install a packet sniffer and capture all the traffic ur eth0 adapter puts out from the time its initialized and check to see what packets are being sent back to the above ips as well as filter it via your mac address/adresses (mac address of NIC on mobo is diff to mac addy on your TA aka the adsl modem/cable modem - all depends upon which layer its getting filtered)

First check is download spybot, adaware, their updates and avast. remove and reinstall your firewall/av, install spyware/adaware, run scans, clean, install avast, update, run scan and then start a packet sniffer to see exactly what incoming requests are coming in for whatever reason

-D

Every IP on the internet is constantly getting attacked and scanned - typically automated by bots/viruses/worms. They infect machines and then use those to scan even more hosts. On my home router, I record tens of thousands attempts a day - what you're seeing is pretty normal to me.

Port 445 is SMB over TCP - so basically people trying to access shares.

Port 1433 is MS SQL - worms looking to attack Microsoft SQL servers

Port 23 is telnet - people trying to login to your router

Not sure on 2386 or 48623 but google lists them as ports people scan for stuff, so probably some service that can be easily attacked. Another common port you'll see accessed is port 22 (SSH), people trying to login to UNIX routers and certain routers. When attackers/bots/worms find ports like telnet/SSH open, they'll then try and attempt common username/passwords to try and break in.

I'd probably ignore those logs as nothing to worry about either way.

Have you tried calling up Adam yet - they may have some clues and be able to provide plenty of trouble-shooting advice :)

I have disabled port TCP 445 just to be safe - this seems to be the most common port sniffed, and the interwebz says it is hackers number 1 target.

I run a registered/active version of Malwarebytes - it goes OFF like a frog in a sock if someone tries to access my computer, so it doesn't look like anthing is getting through. I once had someone try to backtrace me through UTorrent and Malwarebytes went BALLISTIC - so I know it works.

Interestingly I rebooted my connection 15 minutes ago and sure enough it issued me a different IP from Adam - and since then I haven't been sniffed .... whereas on my last reconnection I was hammered wihtin 3 minutes of connection. Weird. I assume this is an Adam-directed DDOS, and have given Adam Internet the heads-up just in case.

But yeah I will run all the scans. thanks for the tip!

I'm addicted to the classic GTA 3 at the moment. Released a few days ago for mobile on the Android Market & Apple App Store; great classic! Awesome for killing time on the ride to work on public transport. Runs very well on the Galaxy S II. Few bugs in the first release, but pretty bloody impressive running as fast and smooth as it does on a smartphone!

I'm addicted to the classic GTA 3 at the moment. Released a few days ago for mobile on the Android Market & Apple App Store; great classic! Awesome for killing time on the ride to work on public transport. Runs very well on the Galaxy S II. Few bugs in the first release, but pretty bloody impressive running as fast and smooth as it does on a smartphone!

Hmmm, I may have to get this for my Nexus, I love GTA 3.

I did notice a couple of reviews in the Market from Nexus users re GTA III - mass crashing apparently. Hope Rockstar sort it out!

Would be brilliant on the big Nexus display. I want one! :D

  • 2 weeks later...

thanks mate! was on this site earlier and the port forwarding button on the left hand side doesnt come up? reckon thats why im at a loss here :(

Sometimes it is called Virtual Server instead of Port forwarding

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



  • Latest Posts

    • Hey Daniel, sorry to hear that and thanks for posting up for us at a really hard time I only knew SmoothLine through the forums, we never met as we are based in different states, but when he was most active on here he was quite a while back so not many of the current crowd might remember him. I am pretty sure he was active in the Queensland SQU club but that is defunct now too (times are changing and we are all getting older). Farewell SmoothLine!    
    • Turns out depending on whether the car was equipped with TCS or not there are different signals coming to the dash, meaning there are different speedo clusters.  Wired in a speedo calibrator box from aliexpress and now works fine. 
    • Thanks for the nice comments, I really appreciate it.  Regarding mods, I am planning of keeping it mostly stock. The only possible future mods I am thinking of are new wheels, perhaps sports shocks or coilovers, and was about to do a cat delete on Monday (However, I am unsure about this and I am getting cold feet). Despite this modifications, I'd still keep all the original wheels/parts.
    • Hi All, I’m looking for a R34 GTR rear propshaft for my getrag conversion in my R33. If anyone has one available send me a message. Thank you  Roy
    • Yep I ended up buying a new gasket and no leaks since.
×
×
  • Create New...