HRWiki talk:ProxyBlocks - Revision history

Tom: /* It's over! Or is it? */ Reply for Thiesi.

Tom — Tue, 27 Jun 2006 23:17:48 GMT

It's over! Or is it?: Reply for Thiesi.

← Older revision		Revision as of 23:17, 27 June 2006
Line 164:		Line 164:

	:::::::::Tom, I did that already, but the fact that SORBS listed my machine incorrectly as "trojaned" and "vulnerable/hacked server" doesn't affect my previous statement in any way. I just wanted to point out that there is no "trojan horse" or anything the like running on 194.95.224.201 - and never was. For some strange reason I don't like my IP address to be mentioned in such a context ... :-) --[[User:84.56.175.7\|84.56.175.7]] 23:08, 27 June 2006 (UTC) (Thiesi)		:::::::::Tom, I did that already, but the fact that SORBS listed my machine incorrectly as "trojaned" and "vulnerable/hacked server" doesn't affect my previous statement in any way. I just wanted to point out that there is no "trojan horse" or anything the like running on 194.95.224.201 - and never was. For some strange reason I don't like my IP address to be mentioned in such a context ... :-) --[[User:84.56.175.7\|84.56.175.7]] 23:08, 27 June 2006 (UTC) (Thiesi)
		+
		+	::::::::::Thiesi, and the fact that you say that your machine isn't compromised doesn't affect my previous statement in any way either. I'm sorry that the SORBS may not be top-notch, and I admit it has its issues, but that's what we have to go on. -- [[User:Tom\|Tom]] 23:17, 27 June 2006 (UTC)

84.56.175.7 at 23:08, 27 June 2006

84.56.175.7 — Tue, 27 Jun 2006 23:08:31 GMT

← Older revision		Revision as of 23:08, 27 June 2006
Line 162:		Line 162:

	::::::::Thiesi, 194.95.224.201 has been blacklisted [http://www.domaintools.com/rbl/?ip=194.95.224.201 for a while] because the [http://www.us.sorbs.net/ Spam and Open Relay Blocking System] reports that the machine is a "vulnerable/hacked server" and a "Likely Trojaned Machine, host running Korgo trojan". If you wish to request a delisting, they say to please do so through the [http://www.dnsbl.us.sorbs.net/cgi-bin/support their support system]. -- [[User:Tom\|Tom]] 22:31, 24 June 2006 (UTC)		::::::::Thiesi, 194.95.224.201 has been blacklisted [http://www.domaintools.com/rbl/?ip=194.95.224.201 for a while] because the [http://www.us.sorbs.net/ Spam and Open Relay Blocking System] reports that the machine is a "vulnerable/hacked server" and a "Likely Trojaned Machine, host running Korgo trojan". If you wish to request a delisting, they say to please do so through the [http://www.dnsbl.us.sorbs.net/cgi-bin/support their support system]. -- [[User:Tom\|Tom]] 22:31, 24 June 2006 (UTC)
		+
		+	:::::::::Tom, I did that already, but the fact that SORBS listed my machine incorrectly as "trojaned" and "vulnerable/hacked server" doesn't affect my previous statement in any way. I just wanted to point out that there is no "trojan horse" or anything the like running on 194.95.224.201 - and never was. For some strange reason I don't like my IP address to be mentioned in such a context ... :-) --[[User:84.56.175.7\|84.56.175.7]] 23:08, 27 June 2006 (UTC) (Thiesi)

Tom: /* It's over! Or is it? */ Reply for Thiesi.

Tom — Sat, 24 Jun 2006 22:31:20 GMT

It's over! Or is it?: Reply for Thiesi.

← Older revision		Revision as of 22:31, 24 June 2006
Line 160:		Line 160:
	::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)		::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)
	:::::::Just to point that out: I never allowed anybody to use my machine for a (D)DoS attack (and of course that will never ever happen), and my machine is not "hijacked" or a "zombie" or anything the like either. --[[User:84.56.184.243\|84.56.184.243]] 23:14, 23 June 2006 (UTC) (Thiesi, admin of 194.95.224.201)		:::::::Just to point that out: I never allowed anybody to use my machine for a (D)DoS attack (and of course that will never ever happen), and my machine is not "hijacked" or a "zombie" or anything the like either. --[[User:84.56.184.243\|84.56.184.243]] 23:14, 23 June 2006 (UTC) (Thiesi, admin of 194.95.224.201)
		+
		+	::::::::Thiesi, 194.95.224.201 has been blacklisted [http://www.domaintools.com/rbl/?ip=194.95.224.201 for a while] because the [http://www.us.sorbs.net/ Spam and Open Relay Blocking System] reports that the machine is a "vulnerable/hacked server" and a "Likely Trojaned Machine, host running Korgo trojan". If you wish to request a delisting, they say to please do so through the [http://www.dnsbl.us.sorbs.net/cgi-bin/support their support system]. -- [[User:Tom\|Tom]] 22:31, 24 June 2006 (UTC)

84.56.184.243 at 23:14, 23 June 2006

84.56.184.243 — Fri, 23 Jun 2006 23:14:08 GMT

← Older revision		Revision as of 23:14, 23 June 2006
Line 159:		Line 159:
	:::::Denial-of-Service attacks are flat-out illegal and can land the person responsible in jail. The only reason there aren't more convictions in cases like this is because they are very difficult to prove. {{User:KieferSkunk/sig}} 19:49, 28 November 2005 (UTC)		:::::Denial-of-Service attacks are flat-out illegal and can land the person responsible in jail. The only reason there aren't more convictions in cases like this is because they are very difficult to prove. {{User:KieferSkunk/sig}} 19:49, 28 November 2005 (UTC)
	::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)		::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)
		+	:::::::Just to point that out: I never allowed anybody to use my machine for a (D)DoS attack (and of course that will never ever happen), and my machine is not "hijacked" or a "zombie" or anything the like either. --[[User:84.56.184.243\|84.56.184.243]] 23:14, 23 June 2006 (UTC) (Thiesi, admin of 194.95.224.201)

AbdiViklas: /* It's over! Or is it? */you can't have the same conversation in two places at once, 'cause there's only one of you

AbdiViklas — Mon, 28 Nov 2005 19:50:41 GMT

It's over! Or is it?: you can't have the same conversation in two places at once, 'cause there's only one of you

← Older revision		Revision as of 19:50, 28 November 2005
Line 158:		Line 158:
	::::My guess is, no, there must be some law this guy's breaking. If these machines are (some people suggest) zombie machines, then just that alone is breaking the law. However, in the (more likely) case where he's using proxies, he could still be breaking some laws by using DoS... but I am not sure. --[[User:Stux\|Stux]] 19:42, 28 November 2005 (UTC)		::::My guess is, no, there must be some law this guy's breaking. If these machines are (some people suggest) zombie machines, then just that alone is breaking the law. However, in the (more likely) case where he's using proxies, he could still be breaking some laws by using DoS... but I am not sure. --[[User:Stux\|Stux]] 19:42, 28 November 2005 (UTC)
	:::::Denial-of-Service attacks are flat-out illegal and can land the person responsible in jail. The only reason there aren't more convictions in cases like this is because they are very difficult to prove. {{User:KieferSkunk/sig}} 19:49, 28 November 2005 (UTC)		:::::Denial-of-Service attacks are flat-out illegal and can land the person responsible in jail. The only reason there aren't more convictions in cases like this is because they are very difficult to prove. {{User:KieferSkunk/sig}} 19:49, 28 November 2005 (UTC)
		+	::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)

KieferSkunk: /* It's over! Or is it? */

KieferSkunk — Mon, 28 Nov 2005 19:49:04 GMT

It's over! Or is it?

← Older revision		Revision as of 19:49, 28 November 2005
Line 157:		Line 157:
	:::Are we ever going to be able to re-open the wiki? Or are we doomed to eternal lockdown? Is it even legal, what this guy's doing? {{User:Thunderbird L17/Siggie}} 18:33, 28 November 2005 (UTC)		:::Are we ever going to be able to re-open the wiki? Or are we doomed to eternal lockdown? Is it even legal, what this guy's doing? {{User:Thunderbird L17/Siggie}} 18:33, 28 November 2005 (UTC)
	::::My guess is, no, there must be some law this guy's breaking. If these machines are (some people suggest) zombie machines, then just that alone is breaking the law. However, in the (more likely) case where he's using proxies, he could still be breaking some laws by using DoS... but I am not sure. --[[User:Stux\|Stux]] 19:42, 28 November 2005 (UTC)		::::My guess is, no, there must be some law this guy's breaking. If these machines are (some people suggest) zombie machines, then just that alone is breaking the law. However, in the (more likely) case where he's using proxies, he could still be breaking some laws by using DoS... but I am not sure. --[[User:Stux\|Stux]] 19:42, 28 November 2005 (UTC)
		+	:::::Denial-of-Service attacks are flat-out illegal and can land the person responsible in jail. The only reason there aren't more convictions in cases like this is because they are very difficult to prove. {{User:KieferSkunk/sig}} 19:49, 28 November 2005 (UTC)

Stux: /* It's over! Or is it? */

Stux — Mon, 28 Nov 2005 19:42:18 GMT

It's over! Or is it?

← Older revision		Revision as of 19:42, 28 November 2005
Line 156:		Line 156:
	::I said this in [[HRWiki:Da Basement\|Da Basement]], too, but these IPs in general show too many similarities to be random machines, in my opinion. Also, I believe some ''one person'' is driving these attacks, because they start and stop, and because whoever it is adapts to our countermeasures in specific ways. — [[User:It's dot com\|It's dot com]] 17:33, 21 November 2005 (UTC)		::I said this in [[HRWiki:Da Basement\|Da Basement]], too, but these IPs in general show too many similarities to be random machines, in my opinion. Also, I believe some ''one person'' is driving these attacks, because they start and stop, and because whoever it is adapts to our countermeasures in specific ways. — [[User:It's dot com\|It's dot com]] 17:33, 21 November 2005 (UTC)
	:::Are we ever going to be able to re-open the wiki? Or are we doomed to eternal lockdown? Is it even legal, what this guy's doing? {{User:Thunderbird L17/Siggie}} 18:33, 28 November 2005 (UTC)		:::Are we ever going to be able to re-open the wiki? Or are we doomed to eternal lockdown? Is it even legal, what this guy's doing? {{User:Thunderbird L17/Siggie}} 18:33, 28 November 2005 (UTC)
		+	::::My guess is, no, there must be some law this guy's breaking. If these machines are (some people suggest) zombie machines, then just that alone is breaking the law. However, in the (more likely) case where he's using proxies, he could still be breaking some laws by using DoS... but I am not sure. --[[User:Stux\|Stux]] 19:42, 28 November 2005 (UTC)

Thunderbird L17: /* It's over! Or is it? */ - Reopen the wiki... Ever?

Thunderbird L17 — Mon, 28 Nov 2005 18:33:18 GMT

It's over! Or is it?: - Reopen the wiki... Ever?

← Older revision		Revision as of 18:33, 28 November 2005
Line 155:		Line 155:
	:::I can have somebody whacked. Just give me a name or address. {{User:Invisible_Robot_Fish/sig}} 16:28, 21 November 2005 (UTC)		:::I can have somebody whacked. Just give me a name or address. {{User:Invisible_Robot_Fish/sig}} 16:28, 21 November 2005 (UTC)
	::I said this in [[HRWiki:Da Basement\|Da Basement]], too, but these IPs in general show too many similarities to be random machines, in my opinion. Also, I believe some ''one person'' is driving these attacks, because they start and stop, and because whoever it is adapts to our countermeasures in specific ways. — [[User:It's dot com\|It's dot com]] 17:33, 21 November 2005 (UTC)		::I said this in [[HRWiki:Da Basement\|Da Basement]], too, but these IPs in general show too many similarities to be random machines, in my opinion. Also, I believe some ''one person'' is driving these attacks, because they start and stop, and because whoever it is adapts to our countermeasures in specific ways. — [[User:It's dot com\|It's dot com]] 17:33, 21 November 2005 (UTC)
		+	:::Are we ever going to be able to re-open the wiki? Or are we doomed to eternal lockdown? Is it even legal, what this guy's doing? {{User:Thunderbird L17/Siggie}} 18:33, 28 November 2005 (UTC)

It's dot com: /* It's over! Or is it? */ reply for Stux

It's dot com — Mon, 21 Nov 2005 17:33:25 GMT

It's over! Or is it?: reply for Stux

← Older revision		Revision as of 17:33, 21 November 2005
Line 154:		Line 154:
	::Nope no danish, I don't have any in my humble abode. It sounds like a neat idea, but for me, it's not the right time yet (eating a danish). Hmmm... a baseball bat... or how about a sharpie!? Er... I mean a Mace! Yes a Mace! Ok I do have a question: I remember reading a poster that said that these attacks came from zombie machines and not open proxies -- do you guys know which one of the two this really is? Is there a way to tell? (I'm guessing yes, since if they're open proxies anybody can gain access to them.) He got more IPs?! Yay. O_o If I get the time I hope I can help by providing useful code. --[[User:Stux\|Stux]] 16:09, 21 November 2005 (UTC)		::Nope no danish, I don't have any in my humble abode. It sounds like a neat idea, but for me, it's not the right time yet (eating a danish). Hmmm... a baseball bat... or how about a sharpie!? Er... I mean a Mace! Yes a Mace! Ok I do have a question: I remember reading a poster that said that these attacks came from zombie machines and not open proxies -- do you guys know which one of the two this really is? Is there a way to tell? (I'm guessing yes, since if they're open proxies anybody can gain access to them.) He got more IPs?! Yay. O_o If I get the time I hope I can help by providing useful code. --[[User:Stux\|Stux]] 16:09, 21 November 2005 (UTC)
	:::I can have somebody whacked. Just give me a name or address. {{User:Invisible_Robot_Fish/sig}} 16:28, 21 November 2005 (UTC)		:::I can have somebody whacked. Just give me a name or address. {{User:Invisible_Robot_Fish/sig}} 16:28, 21 November 2005 (UTC)
		+	::I said this in [[HRWiki:Da Basement\|Da Basement]], too, but these IPs in general show too many similarities to be random machines, in my opinion. Also, I believe some ''one person'' is driving these attacks, because they start and stop, and because whoever it is adapts to our countermeasures in specific ways. — [[User:It's dot com\|It's dot com]] 17:33, 21 November 2005 (UTC)

Invisible Robot Fish: /* It's over! Or is it? */

Invisible Robot Fish — Mon, 21 Nov 2005 16:28:12 GMT

It's over! Or is it?

← Older revision		Revision as of 16:28, 21 November 2005
Line 153:		Line 153:
	:Don't look now, but I got some more IPs from the recent attack to the Fanstuff over the weekend. Some of them fall in the ranges we have already identified... and some of them don't. I will have a report soon. In the meantime, maybe someone can find a way to deal with this problem at the source... perhaps a baseball bat to the vandal's motherboard would do nicely. — [[User:It's dot com\|It's dot com]] 15:50, 21 November 2005 (UTC)		:Don't look now, but I got some more IPs from the recent attack to the Fanstuff over the weekend. Some of them fall in the ranges we have already identified... and some of them don't. I will have a report soon. In the meantime, maybe someone can find a way to deal with this problem at the source... perhaps a baseball bat to the vandal's motherboard would do nicely. — [[User:It's dot com\|It's dot com]] 15:50, 21 November 2005 (UTC)
	::Nope no danish, I don't have any in my humble abode. It sounds like a neat idea, but for me, it's not the right time yet (eating a danish). Hmmm... a baseball bat... or how about a sharpie!? Er... I mean a Mace! Yes a Mace! Ok I do have a question: I remember reading a poster that said that these attacks came from zombie machines and not open proxies -- do you guys know which one of the two this really is? Is there a way to tell? (I'm guessing yes, since if they're open proxies anybody can gain access to them.) He got more IPs?! Yay. O_o If I get the time I hope I can help by providing useful code. --[[User:Stux\|Stux]] 16:09, 21 November 2005 (UTC)		::Nope no danish, I don't have any in my humble abode. It sounds like a neat idea, but for me, it's not the right time yet (eating a danish). Hmmm... a baseball bat... or how about a sharpie!? Er... I mean a Mace! Yes a Mace! Ok I do have a question: I remember reading a poster that said that these attacks came from zombie machines and not open proxies -- do you guys know which one of the two this really is? Is there a way to tell? (I'm guessing yes, since if they're open proxies anybody can gain access to them.) He got more IPs?! Yay. O_o If I get the time I hope I can help by providing useful code. --[[User:Stux\|Stux]] 16:09, 21 November 2005 (UTC)
		+	:::I can have somebody whacked. Just give me a name or address. {{User:Invisible_Robot_Fish/sig}} 16:28, 21 November 2005 (UTC)

← Older revision		Revision as of 22:31, 24 June 2006
Line 160:		Line 160:
	::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)		::::::Heh; I just asked the same thing, Thunderbird, over at [[Talk:Main Page#NSMC is at it again]]. I don't like the idea of a permanently closed wiki (if that's what it becomes, he's at least won a partial victory); maybe it's time to start discussing whether there's a way to reopen ''before'' he's caught. —[[User:AbdiViklas\|AbdiViklas]] 19:50, 28 November 2005 (UTC)
	:::::::Just to point that out: I never allowed anybody to use my machine for a (D)DoS attack (and of course that will never ever happen), and my machine is not "hijacked" or a "zombie" or anything the like either. --[[User:84.56.184.243\|84.56.184.243]] 23:14, 23 June 2006 (UTC) (Thiesi, admin of 194.95.224.201)		:::::::Just to point that out: I never allowed anybody to use my machine for a (D)DoS attack (and of course that will never ever happen), and my machine is not "hijacked" or a "zombie" or anything the like either. --[[User:84.56.184.243\|84.56.184.243]] 23:14, 23 June 2006 (UTC) (Thiesi, admin of 194.95.224.201)
		+
		+	::::::::Thiesi, 194.95.224.201 has been blacklisted [http://www.domaintools.com/rbl/?ip=194.95.224.201 for a while] because the [http://www.us.sorbs.net/ Spam and Open Relay Blocking System] reports that the machine is a "vulnerable/hacked server" and a "Likely Trojaned Machine, host running Korgo trojan". If you wish to request a delisting, they say to please do so through the [http://www.dnsbl.us.sorbs.net/cgi-bin/support their support system]. -- [[User:Tom\|Tom]] 22:31, 24 June 2006 (UTC)