Scratch
archived forums
#1 2010-11-23 23:36:40
Something attacking my server?
Malwarebytes' Anti-Malware is blocking access to something incoming on port 8080 using svchost.exe. I find it strange because that is the port I tell people to use to access my website.
But my site is down because the site HD is attached to my laptop.
~ihaveamac - visit ihaveamac.net
Offline
#2 2010-11-24 08:10:46
Re: Something attacking my server?
Sounds like a DOS (denial of service) attack to me. I don't think it is a virus, just a (virus caused 
) botnet trying to crash your server. The best thing to do would be to beef up your server computer, or hope MBAM holds up.
Offline
#3 2010-11-24 08:26:10
- shugocharafan88
- Scratcher
- Registered: 2009-10-07
- Posts: 1000+
Re: Something attacking my server?
I'm back. Here's a Kento/Shori kiss.Offline
#4 2010-11-24 08:33:38
Re: Something attacking my server?
shugocharafan88 wrote:
think of it this way: internet terrorists.
Offline
#5 2010-11-24 08:36:28
- Scratchthatguys
- Scratcher
- Registered: 2010-07-16
- Posts: 1000+
Re: Something attacking my server?
It's probably a Denial of Service. Check port 8079 and 8081, they might be getting infected too. Also, check any other main servers.
Offline
#6 2010-11-24 08:46:36
- militarydudes
- Scratcher
- Registered: 2008-09-12
- Posts: 1000+
Re: Something attacking my server?
ihaveamac wrote:
Malwarebytes' Anti-Malware is blocking access to something incoming on port 8080 using svchost.exe. I find it strange because that is the port I tell people to use to access my website.
But my site is down because the site HD is attached to my laptop.
hurry up and find the error 500 ninja monkeys and give them that message you were supposed to.
__m. .m__ KILROY WAS HERE
U
Offline
#7 2010-11-24 08:48:28
Re: Something attacking my server?
Scratchthatguys wrote:
It's probably a Denial of Service. Check port 8079 and 8081, they might be getting infected too. Also, check any other main servers.
That's what I said!
@shugo I need to add something to what 08jackt said.
In this case, it is internet terrorists that have turned some (or alot) of computers into mindless zombies.
Offline
#8 2010-11-25 02:15:14
Re: Something attacking my server?
Port 8080 is the second http port. The other one being port 80 which you should be using. It could be malware pretending to be that type of exe. Svchost.exe is an internet hosting service. It could be another web server trying to communicate with your computer.
Need more information. Is anyone able to access the web server through that port?
My site Find someone post count. Click posts under username. Find number of pages. Times that by 40 for min and 60 for max and you have a rough estimate of post count.
Offline
#9 2010-11-25 15:17:45
- antimonyarsenide
- Scratcher
- Registered: 2010-02-03
- Posts: 1000+
Re: Something attacking my server?
I don't know anything about this stuff. Sorry.
But here's a bump for you.
No, I'm not back (yet
), so pretend this is invisible.Offline
#10 2010-11-25 15:47:37
- agscratcher
- Scratcher
- Registered: 2009-07-09
- Posts: 1000+
Re: Something attacking my server?
One answer: Someone is repeatedly firing low-orbit ion cannons at your sever.
END OF STORY
Offline