After posting my previous message, i came across a message that mentioned editing a nuke NSN user file or something to that effect. I edited it and deleted my ip address and now i can get into my site. The error said:
Date & Time: 2004-06-06 07:34:58
Blocked IP: xxx.xxx.xxx.xxx
User ID: (1)
Reason: Abuse - UNION
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Query String:
Only registered users can see links on this board! Get registered or login to the forums!
Forwarded For: none
Client IP: none
Remote Address: xxx.xxx.xxx.xxx
Remote Port: 61815
Request Method: GET
--------------------
Who-Is for IP
xxx.xxx.xxx.xxx
I never tried hacking my own site. How is this possible? Wrong setting in Sentinel?
Joined: Aug 27, 2002 Posts: 16987 Location: Kansas
Posted:
Sun Jun 06, 2004 7:51 am
What is the Blocked IP? That is the IP that was used to issue the union command. There is no wrong setting. Someone issued that command or it would not be in your logs. It is possible that your IP was spoofed, but nonetheless, if the command is in your logs, it was issued.
Date & Time: 2004-06-06 07:34:58
Blocked IP: 209.196.235.214
User ID: (1)
Reason: Abuse - UNION
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Query String:
Only registered users can see links on this board! Get registered or login to the forums!
Forwarded For: none
Client IP: none
Remote Address: 209.196.235.214
Remote Port: 61815
Request Method: GET
--------------------
Who-Is for IP
209.196.235.214
Joined: Aug 27, 2002 Posts: 16987 Location: Kansas
Posted:
Sun Jun 06, 2004 8:14 am
Joe, I can't explain how, but that is a hack attempt. Somewhere, somehow, that was done from that IP. Maybe someone posted a post, article, weblink, ehatever, and deliberately planted it so you would click it, I don't know. But, it came from your machine.
Only registered users can see links on this board! Get registered or login to the forums!
there is a notice of a hacking attempt. Sentinel says it blocked: 202.156.2.114 - UNION
I did receive a email but it wasnt exactly this ip address.
Date & Time: 2004-06-05 11:26:07
Blocked IP: 202.156.27.169
User ID: (1)
Reason: Abuse - UNION
--------------------
User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Query String:
Only registered users can see links on this board! Get registered or login to the forums!
Forwarded For: 202.156.27.169
Client IP: none
Remote Address: 202.156.2.114
Remote Port: 55373
Request Method: GET
--------------------
Who-Is for IP
202.156.27.169
OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU
ReferralServer:
Only registered users can see links on this board! Get registered or login to the forums!
NetRange: 202.0.0.0 - 203.255.255.255
CIDR: 202.0.0.0/7
NetName: APNIC-CIDR-BLK
NetHandle: NET-202-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.RIPE.NET
NameServer: DNS1.TELSTRA.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or
Only registered users can see links on this board! Get registered or login to the forums!
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to
Only registered users can see links on this board! Get registered or login to the forums!
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
![[Valid RSS]](http://www.ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
