CWO4Mann

When logged into Rennlist a few moments ago, my system came to a halt ... and this message popped up:

Details: Attempted Intrusion "MSSQL_Null_Packet_DoS" against your machine was detected and blocked
Intruder: www.9xx-cars.com(195.140.140.56)(http(80))
Risk Level: Low
Protocol: TCP
Attacked IP: MISTERFIXIT(192.168.1.105).
Attacked Port: ms-sql-s(1433)

Click on the address to trace the attacker
You can get detailed information about this attack at Symantec Security Response


What's up with this?

Regards,

Dave

John D.

Hi Dave,

Honestly - I have no idea "what's up with this?" as the 14 servers that deliver this site and connections run on dedicated systems right here, in my office. As well - if someone tries to "attach" to a port or one of my dedicated IPs, that information is logged and that IP BLOCK is pushed off any of my connections...

Therefore - it's not any Rennlist server - nor connection - nor Forum, nor.. In fact - looking at the logs - that IP block hasn't tried to tie to any of my IPs (I have 256 dedicated IPs from 4 /26 blocks)...

So - my guess???

Don't go to other sites besides Rennlist..

John D.

CWO4Mann

Interestingly, I can't even get to the 9xx site, either by using the ip number or the url. It is like a non-existent place for me. Anyway, I have blocked that IP permanently .. I can only assume it was some DoS effort that spilled over ...

Thanks for the info ...

Cheers!

Dave