Singnet Users: any intrusion attempts?

browniebaobao SG

but I blocked them liao.. should be safe right?

or should i Disconnect?

chanff8 SG

Right now I suppose you can still remain online. Make sure your firewall is at max security. If there are more of those alerts, disconnect

browniebaobao SG

yup. set my firewall also.

thanks.

casshern SG

alamak i’m still getting the attacks… wonder wat’s going on.

duotiga83 SG

recently theres lots of attacks…...get dc quite a lot of tmes already…...

YI SG

I had encountered the intrusion continously for a period of around two hours two days back. No problem faced today though.

casshern SG

u got ur firewall up?

kenlim81 SG

afew month ago got some mail that send to singnet server end up in my email a/c.

duotiga83 SG

i on 2 of them still like that......

chanff8 SG

Don't use 2 firewalls, they'll neutralize each other.

Just use the better one...

YI SG

http://hosted.ap.org/dynamic/stories/I/INTERNET_ATTACK?SITE=ASIAONE&SECTION=TECHNOLOGY&TEMPLATE=DEFAULT

websites such as channelnewsasia were affected for a brief period as well..

casshern SG

i'm wondering if it is due to the price war promotion that screwed things up.

supposed to fax in my application form for 3500 today but my printer no ink...

casshern SG

it sets me thinking of those who get d/c regularly and having lags on online games have their firewall up.

cos if its not up most likely the traffic volume will be so great due to the uploading downloading of information on the victim's comp to the attacker's comp. this could lead to the lags and frequent d/c if me not wrong.

ndmmxiaomayi SG

Ok, I have been around checking their server for signs of attacks, but so far nothing has been detected. It seems like the server is not being attacked. Rather, the address might have been spoofed, making it look like Singnet users attacking each other. Not quite sure though, everything looks alright.

Edit: casshern, you sure you are using Singnet? 192.168.x.x IP addresses belongs to Starhub users. Or you are affected by them as well?

ndmmxiaomayi SG

Looks like one of the ports is opened to attacks. Most likely the common ports that we use and Norton is using. It specifically targetted Symantec, your antivirus. And Yahoo! programs is the catalyst which it will launch the attack. If I am not wrong, it could be the work of script kiddies. They have downloaded some trojan horses off the net is attacking you, which obviously didn't work.

ndmmxiaomayi SG

2 completely different firewalls and antivirus are never meant to work together. Choose the one you trust and use.

ndmmxiaomayi SG

Price war probably screwed things up and caused the connections problems, but it will not cause intrusion attacks. And if competitors are using this trick to make Singnet go out of business, security people will discover it and they will be put out of business by the government. Either some professionals are doing this, or we got ourselves some semi-professionals, halfway in between script kiddies and professionals.

browniebaobao SG

so what can i do? cannot delete right?

ndmmxiaomayi SG

Full details on MS ASN1

http://www.symantec.com/avcenter/attack_sigs/s20409.html

As for bbb, the reason why you are attacked via Yahoo! programs is because this attack makes use of a loophole in Yahoo! Messenger. If I didn't guess wrongly, you are using Yahoo! Messenger right?

ndmmxiaomayi SG

Do a scan for your computer first. If nothing is detected, then there should be nothing. As the attempt has been reported as being blocked, so nothing should be wrong.

« Previous Page Next Page »