Cruisers Forum
 


Join CruisersForum Today

Reply
 
Thread Tools Rate Thread Display Modes
Old 08-09-2010, 14:07   #1
Registered User
 
Yachts66's Avatar

Join Date: Sep 2005
Location: In the Jungle, on an Island near the beach
Boat: Roberts 45 Mariah's Child
Posts: 654
Images: 15
FYI - SailNet Hacked

When trying to open a PM here (at SailNet.com) my firewall software issued the following:

Quote:
Safe Browsing

Diagnostic page for sailnet.com

What is the current listing status for sailnet.com?
Site is listed as suspicious - visiting this web site may harm your computer.
Part of this site was listed for suspicious activity 1 time(s) over the past 90 days.
What happened when Google visited this site?
Of the 469 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-08, and the last time suspicious content was found on this site was on 2010-09-08.Malicious software includes 8 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.
Malicious software is hosted on 2 domain(s), including blamesslek.com/, ratsix.com/.
This site was hosted on 2 network(s) including AS20021 (LNH), AS14492 (DATAPIPE).
Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, sailnet.com did not appear to function as an intermediary for the infection of any sites.
Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.
How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Next steps:
So what's going on??

Thomas
__________________

__________________
We don't stop playing because we grow old, we grow old because we stop playing! Ben Franklin
Yachts66 is offline   Reply With Quote
Old 08-09-2010, 14:15   #2
Registered User
 
capn_billl's Avatar

Join Date: Aug 2010
Location: Houston,Tx
Boat: Maxum 37'
Posts: 1,587
A spammer hacked the site?? I have talked to a moderator of another public forum that had several hacking attacks. One was successfull enough that the site had to be stopped while the malware was removed from the server. The moderator had to restore the site from a previous copy that lost several days of postings. Contact the moderator of the site in question as they may not be aware, (but probably are). of the attempt. And may be working on a fix.
__________________

__________________
capn_billl is offline   Reply With Quote
Old 08-09-2010, 14:15   #3
Moderator Emeritus
 
GordMay's Avatar

Join Date: Mar 2003
Location: Thunder Bay, Ontario - 48-29N x 89-20W
Boat: (Cruiser Living On Dirt)
Posts: 31,579
Images: 240
When trying to open a PM here, on CF, your firewall softwarewarns you about SN?
Interesting.

EDIT: for clarity, the OP was talking about opening a PM on SailNet, not CF. --- Hud
__________________
Gord May
"If you didn't have the time or money to do it right in the first place, when will you get the time/$ to fix it?"



GordMay is offline   Reply With Quote
Old 08-09-2010, 14:17   #4
Registered User
 
capn_billl's Avatar

Join Date: Aug 2010
Location: Houston,Tx
Boat: Maxum 37'
Posts: 1,587
After several attacks the moderator had to disable ALL guest posting. And auto account signups. Each new member had to be manually audited with no posting priviledges until vetted.
__________________
capn_billl is offline   Reply With Quote
Old 08-09-2010, 14:21   #5
Registered User
 
Yachts66's Avatar

Join Date: Sep 2005
Location: In the Jungle, on an Island near the beach
Boat: Roberts 45 Mariah's Child
Posts: 654
Images: 15
Thank you.

Thomas
__________________
We don't stop playing because we grow old, we grow old because we stop playing! Ben Franklin
Yachts66 is offline   Reply With Quote
Old 08-09-2010, 14:28   #6
Registered User
 
speakeasy's Avatar

Join Date: Jul 2009
Location: La Paz
Boat: 41' Custom CC Cutter
Posts: 647
Happened at sailnet this am, same message. Wouldn't allow access at all in firefox, but would in chrome and ie, then IE began the same message warning and limited access. Maybe google is having a little nervous breakdown. So much power in the hands of one gen x company. Me oh my. I didn't get a warning here in firefox today tho', yet.
__________________
"The nature of the universe is such that ends can never justify the means. On the contrary, the means always determine the end." ---Aldous Huxley
speakeasy is offline   Reply With Quote
Old 08-09-2010, 16:05   #7
Senior Cruiser
 
rebel heart's Avatar

Cruisers Forum Supporter

Join Date: Oct 2005
Posts: 6,190
Images: 3
I remember when the guys that ran sailnet got into a big argument and the site was offline for what, six months?
__________________
rebel heart is offline   Reply With Quote
Old 08-09-2010, 16:06   #8
Moderator Emeritus
 
Pblais's Avatar

Join Date: Mar 2003
Location: Hayes, VA
Boat: Gozzard 36
Posts: 8,700
Images: 15
Send a message via Skype™ to Pblais
Quote:
I didn't get a warning here in firefox today tho', yet.
We've not been hacked. Never is the operative history. It's not taken for granted.

Web browsers are perfect targets to direct virus infected files with. There is a new Mozilla released recently to fix a lot of problems. Any Mozilla based browser user should update now! No browser is really safe. Apple is now faced with a handful of problems. Browsers are the target of virus developers make no mistake.

It emphasizes that you need a decent anti virus application with web protection that get regular updates or you just can ever be sure. You don't expect bigger sites that seem very on top of it to ever get hacked. For a long time the porn sites and other less well run sites were targets because the people that came there surfed from place to place a lot and the admins were not very good.

It's at a new level now and it's almost impossible to say who can not get hit. We are lucky Andy has a few other boards and has a solid infrastructure set up but it still takes day to day efforts to keep a site in a top secure state.

We hope Sailnet can clean up the problem and get back to being online and safe again soon.
__________________
Paul Blais
s/v Bright Eyes Gozzard 36
37 15.7 N 76 28.9 W
Pblais is offline   Reply With Quote
Old 08-09-2010, 16:43   #9
Registered User

Join Date: Aug 2009
Location: Los Angeles Harbor
Boat: Newport 30
Posts: 94
Google Being OverZealous, I think

I checked this out after reading the posts & yes, I got a warning page, as well. If you read the "Why was this page blocked", you'll find this statement:

"This site was hosted on 2 network(s) including AS20021 (LNH), AS14492 (DATAPIPE)."

It seems that sailnet.com is hosted on the same network where a number of possibly hacked &/or malicious sites reside, so Google has taken it upon themselves to just block every site on the sub-net (network). Sorta like using a sledge hammer to kill a fly, in my opinion, but whatever.

It does NOT appear that sailnet has been hacked or is hosting malware, but unfortunate to be a client of a hosting company that has other clients on the same network that are guilty of suspicous behaviour
__________________
jerrymc is offline   Reply With Quote
Old 08-09-2010, 16:48   #10
Senior Cruiser
 
DeepFrz's Avatar

Cruisers Forum Supporter

Join Date: Mar 2006
Location: Winnipeg
Boat: None at this time
Posts: 7,930
I picked up a couple of Trojans a few weeks ago. Have no idea where they came from, but I know for sure it was not porn sites. Security Essentials cleaned them up but I had to reinstall a few software packages as the update software for them would not work(Java for one). Yesterday I had to delete and reinstall Adobe Flash. I don't know why for sure but it just stopped working. It would not work properly until I reinstalled Firefox, which was at the latest level. So I'm not sure if Adobe Flash was corrupted or if Firefox was the problem, or both. Pain.
__________________
DeepFrz is offline   Reply With Quote
Old 08-09-2010, 16:57   #11
Registered User
 
Caribsailors's Avatar

Join Date: Jun 2008
Location: Somewhere in the Caribbean
Boat: Beneteau First 38
Posts: 308
Images: 23
There's Porn on the Internet?!
__________________
As I sit, a swirling sea of passion gives it's poems in waves underneath me.
The whispers of the sun in my eyes, a silence within.
Rhythm of the surf, drums of the sea. Thoughts tumble and toss about the deep blue abyss inside me, where the love of you dwells.
I'm fighting currents to get back to you, listening to the flow of your liquid language as you beckon me, "Come Play"
Mariners Cove, CI. Anonymous.
Caribsailors is offline   Reply With Quote
Old 08-09-2010, 17:07   #12
Senior Cruiser
 
rebel heart's Avatar

Cruisers Forum Supporter

Join Date: Oct 2005
Posts: 6,190
Images: 3
Yeah I dunno, this sounds rather damning:

Quote:
Of the 469 pages we tested on the site over the past 90 days, 8 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-08, and the last time suspicious content was found on this site was on 2010-09-08.
__________________
rebel heart is offline   Reply With Quote
Old 08-09-2010, 17:10   #13
Registered User
 
avb3's Avatar

Cruisers Forum Supporter

Join Date: Jul 2010
Location: Florida/Alberta
Boat: Lippincott 30
Posts: 9,913
Images: 1
I had the misfortune of having a number of my websites on a server that was infected. IN fact, some of my pages had javascript running on them that pointed to some porn and I am not sure what other sites.

What was worse, when I contacted the admin they suggested it was my issue... not theirs. I won't go into the long and short of it, but I quickly moved my websites, even though I still had up to 6 months left on a contract. No problems since then.

I take these warning seriously. The best way to avoid them if your on a shared server is to run a VPS or dedicated one. If your site is big enough, it is not a huge investment, although it does require more technical skills.
__________________
avb3 is offline   Reply With Quote
Old 08-09-2010, 18:23   #14
Registered User
 
Yachts66's Avatar

Join Date: Sep 2005
Location: In the Jungle, on an Island near the beach
Boat: Roberts 45 Mariah's Child
Posts: 654
Images: 15
Oh kewl, well you lost me after the second paragraph, so I guess that means I'm not a techie any more. Where's DOS when you need it?

Regards,

Thomas
__________________
We don't stop playing because we grow old, we grow old because we stop playing! Ben Franklin
Yachts66 is offline   Reply With Quote
Old 08-09-2010, 18:45   #15
Captain
 
Andy R's Avatar

Cruisers Forum Supporter

Join Date: Nov 2005
Location: Forianopolis, Brasil
Posts: 1,574
Send a message via MSN to Andy R Send a message via Skype™ to Andy R
I feel bad for them. We have been through hacks and it's a very difficult situation to resolve. Hopefully they will turn off their site ASAP and work through the issues so no unnecessary computers are infected and be back up and running soon.
__________________

__________________
Andy R is offline   Reply With Quote
Reply

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SailNet.com seafox Off Topic Forum 8 12-07-2007 22:26
SailNet spam Amgine Product or Service Reviews & Evaluations 3 16-12-2006 11:22
SAILNET Message Board GordMay The Library 24 07-12-2005 05:43



Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -7. The time now is 06:43.


Google+
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Social Knowledge Networks
Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.

ShowCase vBulletin Plugins by Drive Thru Online, Inc.