PDA

View Full Version : Web Attack again



1600vw
02-07-2016, 05:48 AM
I am getting attacked again when I log into this site. I had a hard time logging in because of this. I had to kinda use the back door. I could not just go to Log in at the top of the page to get in.

dusterpilot
02-07-2016, 06:54 AM
Me, too. Started yesterday. This is the only site I'm getting it from.

gbrasch
02-07-2016, 11:02 AM
What is an "attack", I check in daily and have never had a problem. I use a Mac if that makes a difference, just curious.

rwanttaja
02-07-2016, 12:09 PM
What is an "attack", I check in daily and have never had a problem. I use a Mac if that makes a difference, just curious.
Win 7 using Firefox and Microsoft Security Essentials, IPAD using Safari, Samsung phone using Android, Win 7 using IE 11 with corporate antivirus (McAfee, I think) at work, no problems.

Ron Wanttaja

Dana
02-07-2016, 12:28 PM
No trouble here, I was getting virus warnings a lot until they fixed it a couple of weeks ago. But I never use the login page, since I have "remember me" checked, I just go straight to the bookmarked "new posts" page.

1600vw
02-08-2016, 07:49 AM
I am still getting this. Firefox using windows 7 on a laptop.

Dave Stadt
02-08-2016, 08:24 AM
Getting the attack also. Windows 10 and Edge. It is not causing any problems. Category: Intrusion PreventionDate & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description2/8/2016 8:19:15 AM,High,An intrusion attempt by 199.193.244.209 was blocked.,Blocked,No Action Required,Web Attack: Malicious Exploit Kit Website 41,No Action Required,No Action Required,"199.193.244.209, 80",eaaforums.org/clientscript/vbulletin-core.js?v=422,199.193.244.209,"TCP, www-http"Network traffic from eaaforums.org/clientscript/vbulletin-core.js?v=422 matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME4\WINDOWS\SYSTEMAPPS\MICROSO FT.MICROSOFTEDGE_8WEKYB3D8BBWE\MICROSOFTEDGECP.EXE . To stop being notified for this type of traffic, in the Actions panel, click Stop Notifying Me.

Glory Aulik
02-08-2016, 08:28 AM
I'll look into this ASAP.

ssmdive
02-08-2016, 10:07 AM
Hey, but you trust the EAA with your background information!

Glory Aulik
02-08-2016, 10:50 AM
Hey, but you trust the EAA with your background information!

I believe this topic belongs on the Youth Protection thread not the virus warnings... :)

Glory Aulik
02-08-2016, 10:54 AM
Our provider is looking into the problem! I'll keep everyone updated on when the issue is fixed.

ssmdive
02-08-2016, 11:31 AM
I believe this topic belongs on the Youth Protection thread not the virus warnings... :)

Well, expect the EAA has an issue with a provider... Huh, kinda like the background check group was also a third party provider and we were worried they too would 'have an issue'.

Yeah, we were worried the EAA would have an issue with our data being lost on a website... And now your website has issues. Yeah, no comparison at all.....

djenders
02-08-2016, 11:53 AM
Well, expect the EAA has an issue with a provider... Huh, kinda like the background check group was also a third party provider and we were worried they too would 'have an issue'.

Yeah, we were worried the EAA would have an issue with our data being lost on a website... And now your website has issues. Yeah, no comparison at all.....

It isn't fair to characterize the two situations as similar. With virus definitions and malware programs constantly changing, we do come across the occasional issue like this with vBulletin, which is what powers the forums.

We kindly ask that we keep the thread on topic. We continue to investigate the issue and hope to better understand the cause, and any resolution.

As always, we appreciate all of the feedback we read from our members. But we also have rules for the forum, http://eaaforums.org/misc.php?do=showrules

Best,
Dennis

ssmdive
02-08-2016, 12:23 PM
It isn't fair to characterize the two situations as similar. With virus definitions and malware programs constantly changing, we do come across the occasional issue like this with vBulletin, which is what powers the forums.

We kindly ask that we keep the thread on topic. We continue to investigate the issue and hope to better understand the cause, and any resolution.

As always, we appreciate all of the feedback we read from our members. But we also have rules for the forum, http://eaaforums.org/misc.php?do=showrules

Best,
Dennis

Yeah, and websites are ALWAYS under attack and data mining programs are ALWAYS being used. You say they are not similar.... Well, I see:

1. A provider the EAA uses being attacked
2. A provider the EAA uses being attacked being a fear for providing the EAA vendor personal identifying information.

You say they are not the same.... But, I as a member see a GIGANTIC similarity. And this serves as justification of my/our earlier fears.

I have read your rules. I am in line with them. Are you in line with serving the membership by trying to shush any dissenting opinions?

djenders
02-08-2016, 12:31 PM
Yeah, and websites are ALWAYS under attack and data mining programs are ALWAYS being used. You say they are not similar.... Well, I see:

1. A provider the EAA uses being attacked
2. A provider the EAA uses being attacked being a fear for providing the EAA vendor personal identifying information.

You say they are not the same.... But, I as a member see a GIGANTIC similarity. And this serves as justification of my/our earlier fears.

I have read your rules. I am in line with them. Are you in line with serving the membership by trying to shush any dissenting opinions?

I respectfully disagree, and we feel the topic around our Youth Protection Policy should be posted there. As you know, we have always encouraged on-topic posting, and feel strongly that this can be classified as cross-posting.

We most definitely understand that all types of attacks / hacks could be classified together, but this thread is specifically about issues logging into the site. Any further cross-posting will be removed. Please use the appropriate thread.

Thank you.

dusterpilot
02-08-2016, 03:27 PM
Somebody must have done something because I'm no longer getting the warning message. Thanks!

djenders
02-08-2016, 03:53 PM
Somebody must have done something because I'm no longer getting the warning message. Thanks!

Good to see, we've been working on resolving. And it looks like we identified the issue.

Dennis

1600vw
02-08-2016, 04:44 PM
I am no longer getting this either. Problem resolved on my end.

Glory Aulik
02-08-2016, 04:58 PM
I am no longer getting this either. Problem resolved on my end.

Great to hear!