ATTACKED IP from Google on TP: Website Operations Howto  -- Tractorpoint Site Discussion Forum and Review ATTACKED IP from Google on TP: Website Operations Howto -- Tractorpoint Site Discussion Forum

  parts   |   manuals   |   discussion   |   photos   |   podcast   |   reviews   |   specs   |   dealers   |   classifieds   |   contact   |   faq   |   myProfile   |   home          Login Now | Sign Up


FAQ:   What is a tractor?

Forum Index

Kubota Tractors
  Kubota News
  Kubota Price
  Kubota Review
John Deere Tractors
  John Deere News
  John Deere Price
  John Deere Review
New Holland Tractors
  New Holland Tractor Price
  New Holland Tractor Revie
Other Tractor Brands
  Articulated Tractors
  Belarus
  Bobcat Tractors
  Case
  Cub Cadet
  Hinomoto
  Kioti Tractor
  Long
  Massey Ferguson
  Mitsubishi
  Other Tractor Brands
  Other Tractor News
  Shibaura
  Yanmar Tractors
Lawn and Garden Tractors
  Craftsman
  Cub Cadet Garden
  John Deere Garden
  Kubota Lawn Garden
  Other Garden Tractors
  Simplicity
  Toro Wheelhorse
  Ventrac Lawn Tractors
Antique Tractors
  Allis Chalmers
  Case David Brown
  Farmall IHC
  Ford
  Ford 9N 2N 8N
  Fordson
  Harry Ferguson
  John Deere Older
  Massey-Harris Ferguson
  Minneapolis Moline
  Oliver Cletrac Cockshutt
  Restoration
  Tractor Pulling
Tractor Attachments Implements 3ph
  Back Hoe
  Field Mowers Brush Cutter
  Grooming Mowers Finish Mo
  Loaders
  Snowblowers / Snow Plows
  Tillers and Ploughs
  Tractor Implements
  Trenchers
  Wood Chippers 3PH
Tractor Maintenance
  Diesel Fuel Lubrication E
  Tractor Engine Repair Reb
  Tractor Tires
Utility ATV
  All Terrain Vehicles
  John Deere Gator
  Mule Utility Vehicles
General Tractor
  Farming Ranching Agricult
  Photo Contest
  Size Tractor Needed
  Tractor Projects
  Tractor Safety
  Welding
Chinese Tractors
  Jinma Farmpro Agracat
  NorTrac Tractors
  Other Chinese Tractors
Cars
  All Brands
  Audi VW
  BMW
  Car Tires and Maintenance
  Chrysler
  Exotic, Sports, Racing
  Ford Cars
  General Motors
  Honda
  Hyundai
  Mercedes
  News
  Nissan
  Subaru
  SUV and Trucks
  Toyota Cars
Trucks Trailers
  Chevy Pickup Trucks
  Dodge Pickup Trucks
  Ford Pickup Trucks
  Toyota Pickup Trucks
  Chevy Pickup Trucks
  Dodge Pickup Trucks
  Ford Pickup Trucks
  Toyota Pickup Trucks
Home Building
  Alternate Electric Energy
  Barns Pole Barns
  Buying Ranch Farm Acreage
  Carpentry
  Contractors
  Electric
  Excavation
  Moldings Finish Trim
  Other Home Building
  Pellet Stoves
  Plumbing
  Wood Stoves
Tools
  Electirc Power Tools
  Gas Power Tools
  Generators
  Shop Tools
  Techniques Howto
Landscape
  Flowers Shrubs Garden
  Golf Course Maintenance
  Irrigation Systems
  Landscape Design
  Landscape Lighting
  Landscape Maintenance
  Lawn, Turf, and Grass
  Vegetable Gardening
Construction
  Caterpillar
  Komatsu
  Wheel Loaders
Current Events Health Happiness
  Current Events
  Dogs and other Pets
  Electronics And Computers
  Food
  Health
  Just For Fun Off Topic
  Movies Music Games
  Personal Finance Investme
  Sports Outdoors
Tractorpoint Site
  Member Photos
  Site Members
  Website Operations Howto


New As Posted | Active Subjects



Click to Post a New Message!

Discussion Boards > Active Subjects > Messages as Posted > Website Operations Howto Forum

Page [ 1 ] | 2 | 3 | | Next >>
Reply | Pop Up Window Reply | Add PhotoAdd Photo
 03-17-2005, 03:48 Post: 108159
harvey



View my Photos

View my Photos  Pics
Join Date: Sep 2000
Location: Moravia, NY
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 1531

7
Filter by User
 ATTACKED IP from Google on TP

Dennis or others, My intrusion software just started getting hit, the past 2 days, from:

pagead2.googlesyndication.com(64.233.167.99) (http80).

Is anyone else seeing this?

I also show its an attack by a computer on my network. I'm not networked, yet. With the conflicting info I am reluctant to disable the warning. I get warned everytime I click on a topic or move to and from previous it the topic section. I am not to concerned about a maliasious attack from TP but with the stuff happening I try to be very careful.

Is google just trying to see what I read or have you (Dennis) installed a new monitoring system?

TIA Harvey

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Tractorpoint Operator Note:

Please DO NOT go out and install Symantec Internet Security 2005. Based on this report I made the fatal misstake of installing it on one of my backup machines that was working GREAT before the install. I am very &*%^*^(*^&&*^&* off at this point for doing what I intrinsically believed to be a misstake.

I was just trying to replicate Harvey's issue now I have problems. I noticed during the install of the &^*&^*&^ SW that it was going in too many areas for my liking.

Now I am paying the price losing alot of valuable data and time for *&*(&(*&*( darn it! Looks like I wil be foreced to rebuild the machine. BEWARE!!!!!!!

Dennis






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-17-2005, 08:05 Post: 108162
DennisCTB

TP Contributor

View my Photos

View my Photos  Pics
Join Date: Nov 1998
Location: NorthWest NJ
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 2567

6
Filter by User
 ATTACKED IP from Google on TP

Harvey I noticed a huge spike in site hits that I was investigating yesterday, hopefully just seasonal increase in volume. Can you send me a PM on this and info on the SW you are using, I need to track this down.

Update 3/20/2005:

I checked my log files and I do not see any iregularities.

Dennis






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-18-2005, 04:05 Post: 108204
harvey



View my Photos

View my Photos  Pics
Join Date: Sep 2000
Location: Moravia, NY
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 1531

7
Filter by User
 ATTACKED IP from Google on TP

Dennis I'm using Norton Internet Security, It updates daily.

The Security alert shows:

Intrusion: HTTP_ActivePerl_Overflow
Intruder: 0.0.0.0(3316)
Risk Level: Medium
Protocol: TCP.
Attacked IP: pagead2.googlesyndication.com(64.233.16...
Attacked Port:http(80)

I have looked at the secenarios and this could be a networked pc, but I do not have one. so it may be a computer trying to spoof the address.

Hell I don't know. I do wear glasses but I do not have a pocket protector yet! ;-0

The biggest RED FLAG is the address with part of a IP address.

I can call you or try to do this e-mail. You have my E-mail address.

Thanks Dennis






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-18-2005, 04:10 Post: 108205
harvey



View my Photos

View my Photos  Pics
Join Date: Sep 2000
Location: Moravia, NY
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 1531

7
Filter by User
 ATTACKED IP from Google on TP


Dennis more of the info...













1995-2005 Symantec Corporation.
All rights reserved.
Legal Notices
Privacy Policy


HTTP_ActivePerl_Overflow
Severity: Medium

This attack could pose a moderate security threat. It does not require immediate action.

Attack Category: Suspicious Activity

Anomalous network conditions or traffic patterns. A suspicious activity signature, for example, might detect two systems with identical IP addresses, a condition that indicates an attempted IP spoofing attack.

Description

Older versions of ActivePerl on Windows have a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code at the privilege level of the Web server process. This signature detects attempts to exploit the ActivePerl vulnerability through HTTP.

Links

CAN-2001-0815

BID 3526

Vulnerable Components

Activestate ActivePerl Version 5.6.1.629 and earlier on Windows

False Positive

This signature may not indicate malicious intent if ActivePerl versions other than those listed above are used or ActivePerl is not used at all. In this case, you can exclude this signature from monitoring.









Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-19-2005, 21:18 Post: 108343
denwood



Join Date: Jul 2004
Location: Quarryville PA
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 542
 ATTACKED IP from Google on TP

I got the same warnings today at work where our computer is better protected than at home. It was very annoying because it happened at least 5 times in 10 minutes. My home computer doen't have the same protection so I don't know if it is happening here.






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-19-2005, 22:01 Post: 108345
ksmmoto



View my Photos

View my Photos  Pics
Join Date: Jan 2004
Location: Central Lower Michigan
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 41

4
Filter by User
 ATTACKED IP from Google on TP

I got the same warnings above ActivePearl from my Norton Internet Security. Always between 10:30 pm and 12:30 am every night since Tuesday. Nothing yet tonight however. This is the time I have been on Tractor Point.

The Internet was very slow on 3/17/05, maybe going around. My Norton gave a warning that it updated for Immediate Threats.

ksmmoto






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-19-2005, 22:56 Post: 108347
ksmmoto



View my Photos

View my Photos  Pics
Join Date: Jan 2004
Location: Central Lower Michigan
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 41

4
Filter by User
 ATTACKED IP from Google on TP

I just got hit! At 11:03 pm and 11:53 pm. I always get hit twice and then no more. I was on this site and others during that time.

ksmmoto






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-19-2005, 22:59 Post: 108348
ksmmoto



View my Photos

View my Photos  Pics
Join Date: Jan 2004
Location: Central Lower Michigan
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 41

4
Filter by User
 ATTACKED IP from Google on TP

Change my last post! Just got a third hit. I am done for a while tonight on Tractor Point, but will be online. I will come back lator and report if I get hit when I am not on TP.

ksmmoto






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-20-2005, 04:17 Post: 108352
harvey



View my Photos

View my Photos  Pics
Join Date: Sep 2000
Location: Moravia, NY
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 1531

7
Filter by User
 ATTACKED IP from Google on TP

The best that I can come up with is: Google at IP 64.233.167.99 is trying to follow any and all posts we view and or their ad links.

It is frustrating that they are this persistant however I am goin to keep them blocked.

3/16/200 was their first atempt at comming in the backdoor and they have been at it since on this site.

My software is set fairly secure so there are quite a few web sites that will not allow my visit.

Only very trusted sites will I allow cookies and or their backdooring into my PC. Currently I have 242 addresses that are allowed in the backdoor most of those are multipule pages from the same web.Maybe I need to spend some time today reviewing them...

I trust TP (Dennis) but I do not trust Google (backdooring me) even if they do have the best search engine.






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
 03-20-2005, 08:15 Post: 108357
DennisCTB

TP Contributor

View my Photos

View my Photos  Pics
Join Date: Nov 1998
Location: NorthWest NJ
TractorPoint Premium Member -- 5 Tractors = Very Frequent Poster
Posts: 2567

6
Filter by User
 ATTACKED IP from Google on TP

I have an request into google on this, and I am waiting for a reply.

Here is my theroy on this, which is just conjecture at this point. The Google ads I have are what are called context sensitive ads. I think that these are not attacks on your desktops at all, rather what Google does in their script is try to review the TP page content before serving the context sensitive ads. Unfortunately all of the pages on Tractorpoint are dynamic content, there are almost no static content pages on the site. Therefore Google has to scan the pages each time. Now if you have some extremely sensitive SW on your PC you may be picking this up.

On my machine I have Norton with the latest virus files. And I do not see anything when I browse the site.

I will get back to you when I hear from Google, also to be able to analyze this more I will need some more info about any free SW you are using so that I can attempt to replicate the problem myself.

Dennis






Reply to PostReply | Quote Post Reply to PostQuote Reply | Add PhotoAdd Photo




Bookmarks: Digg It | Del.icio.us |
Reply | Pop Up Window Reply | Add PhotoAdd Photo


Page [ 1 ] | 2 | 3 | | Next >>

Discussion Boards > Active Subjects > Messages as Posted > Website Operations Howto Forum

Thread 108159 Filter by Poster:
bvance 2 | Casco1 1 | Chief 1 | DennisCTB 6 | denwood 1 | harvey 7 | ksmmoto 4 | kwschumm 4 |

 (advanced search)

Picture of the Day
jaylemaster

Shibaura - SL 1643
SL 1643


Unanswered Questions

Shibaura SD2203 rear axle oil
Mitsubishi MX55
Gator HPX ignition module
SL 1643
Removing LHS rear wheel beari
Gear Grinding 1200A - primary
Replacing a friction diskwashe
Bolens k1502 mitsubishi K3 ove


Active Subjects

Big country 4x2 utility vehicl
Operation
lift cylinder for 3pt hitch wo
Still have jerk in hydro
Flatulent gifts human and dog
front mount snowblower
Hydraulics Won t Work
4210 ehydro codes


Hot Topics

NorTrac Tractor Quality Review
Case 446 hydraulic pump
Long 460 hydraulic problem
Jinma Tractor w transmission p
Flatulent gifts human and dog
Generator set up ideas wanted
6X4 Gator Sometimes Shudders
Roof VP75 Brush Mower Manual


Featured Suppliers

Mountain Creek Labradoodles
      MountainCreekLabradoodles.com





New Forums on Gun Sport Shooting and Hunting -- BarrelPoint.com  New Forums on Horses ManePoint.com
Talk Horses at ManePoint
Hunting + Gun Sports at BarrelPoint



Most Viewed

+ TP members coming and going
+ Any suggestions
+ Registering on Tractorpoint
+ What Display Resolution Does your PC have
+ Tractorpoint Site Improvement Survey
+ Oversea s Reply to Buy My Tractor- Suspicious
+ Tractorpoint on Smart Phones
+ Slow Response Time for Tractor Point
+ Anybody else not getting updated message posts
+ Ruger 357 Maximum

Most Discussion

+ TP members coming and going
+ Ruger 357 Maximum
+ Lights POWERR AC-
+ Big Bore Lever Actions
+ Looking a lot like Christmas
+ Anybody else not getting updat
+ Registering on Tractorpoint
+ Slow Response Time for Tractor
+ Tractorpoint Site Improvement
+ Site Suggestion Box

Newest Topics

+ Something I really like and something I don t
+ Equipment Manuals Now Available
+ How are Ads displayed on Tractorpoint
+ Twitter Tractorpoint
+ Subscription and Alert Changes
+ Tractorpoint Page Load Speed
+ Spam Private Mail Attack
+ Avatar
+ Do you use Twitter Facebook Linkedin Stumbleupon
+ New Forum Subscription Capability
















Turbochargers for Tractors and Industrial Machines
Cab Glass for Tractors and Industrial Machines

Alternators for Tractors and Industrial Machines
Radiators for Tractors and Industrial Machines

Driveline Components for Tractors and Industrial Machines
Starter Motors for Tractors and Industrial Machines