Repeated Malicious Pinging from Chilean Web Site !

Infoland Talca ^ | 3/22/2002 | Myself

[ex-Texan]

While logging onto Free Republic my computer has encountered over 25 malicious invasion attempts from the ISP source indicated below:

'Infoland Talca' .... site address: 200.41.52.174

This is just a heads up to all Freepers to let make you aware that a person or persons unknown is targeting Freepers for possible hacking. My computer is protected by Zone Alarm and Spy Stopper. Spy Stopper reports repeated attempts to launch bugs, worms and spyware.

[My Favorite Headache]

BUMP

[Lazamataz]

Sorry about that. I'll stop now.

[Diddle E. Squat]

Where did you buy Spy Stopper, any trustworthy retailer sell it on the web?

[Risky Schemer]

Does cheese go with chili?

[KayEyeDoubleDee]

I funna say. I only tried to hack his a$$ about 12 times

[rhombus]

Who wants Chili with bugs and worms in it?

[dyed_in_the_wool]

Hate to tell you, but that site probably isn't the site of origin. Some cracker (not hacker, but cracker) is probably using it as a staging area. That poor site is just getting hijacked (Chilean SysAdmins being what they are.)
Your tools are also picking up stuff that goes on ALL the time. Keep up your defenses, but don't blast the site. Merely let the admin know they're hosting some potentially malicious stuff.

[oc-flyfish]

My guess would be that you were not targeted because you are a Freeper but instead by random chance.

[DMDTX]

Can you paste your logs here? It may just be a computer infected with a virus trying to spread it into yours. These are not at all uncommon. I see this type of stuff all the time on my computer everyday. Your best bet is to email your logs to abuse@(ispname).

[ex-Texan]

You may download it for a 30 day free trial by logging onto www.msn.com.

[cactmh]

bumpty bump.

[Freemeorkillme]

Operating System and Web Server for 200.41.52.174

--------------------------------------------------------------------------------

The site 200.41.52.174 is running Apache/1.3.19 (Unix) (Red-Hat/Linux) mod_ssl/2.8.1 OpenSSL/0.9.6 DAV/1.0.2 PHP/4.0.4pl1 mod_perl/1.24_01 on Linux

Have fun! Note package versions....

[smithson]

Just more of the liberal mind at work. They can't stand facts to be disseminated they don't like.

"If you can't win on facts Lie, cheat and steal", the liberal motto goes.

[Registered]

I've got a theory about these ping attacks and virus attachments. Ever see Mission Impossible 2?

You produce the antivirus Mr. McCoy, and I'll create the demand, and we'll both get bloody rich"

[Texaggie79]

them dang chilieans.........

[Ol' Sox]

Why not give Patricio a call and let him know whats going on. He'll probably want to know if he's being used as a relay by someone. Here's the particulars:

CMET Chile (NETBLK-IMP-CMET-SFER)
Carmpangue 459
San Fernando,
CL

Netname: IMP-CMET-SFER
Netblock: 200.41.52.128 - 200.41.52.191

Coordinator:
Verdugo, Patricio (PV51-ARIN) pverdugo@CMET.NET
56 2 2513333 444

Record last updated on 29-Jan-2002.
Database last updated on 21-Mar-2002 19:58:27 EDT.

[Sir Gawain]

Hope he speaks English.

[Steven W.]

how is this "breaking news" ??? Get a grip or get a firewall! Nearly every "breaking news" post today (or this month, really) is less than compelling as "breaking news"

[wimpycat]

When I saw this completely innocuous Chilean website, I started to think the same thing. This isn't the real origin of those pings. It's been hijacked.