spam or hack attack

hi to all,



last night I received 155 spammy reviews on 2-3 of my products. McAfee alerts for Improper Error Handling (Path:/siteminderagent/pwcgi/smpwservicescgi.exe

Query TARGET=http://www.mcafeesecure.com). Also there are 6 attempts to log in the administration panel from webappscanner@mcafeesecure.com or 117a977a-a99e@mcafeesecure.com

I deleted the spammy reviews, but in a few hours I received them again. I blocked the IP’s and put a restriction one IP to writes one review. I received only one review in a few hours. How to stop them?



I am not an expert but I think that somebody or something is trying to log in my account using mcafee. Is it possible to be a hacker attack?



Thank you in advance!

[quote name=‘DonLuigi’]hi to all,



last night I received 155 spammy reviews on 2-3 of my products. McAfee alerts for Improper Error Handling (Path:/siteminderagent/pwcgi/smpwservicescgi.exe

Query TARGET=http://www.mcafeesecure.com). Also there are 6 attempts to log in the administration panel from webappscanner@mcafeesecure.com or 117a977a-a99e@mcafeesecure.com

I deleted the spammy reviews, but in a few hours I received them again. I blocked the IP’s and put a restriction one IP to writes one review. I received only one review in a few hours. How to stop them?



I am not an expert but I think that somebody or something is trying to log in my account using mcafee. Is it possible to be a hacker attack?



Thank you in advance![/QUOTE]



Hackers are at it 24/7 and although it is a concern, as long as you have set up as you should and your host is worth his salt you will be ok!!!

[quote name=‘DonLuigi’]hi to all,



last night I received 155 spammy reviews on 2-3 of my products. McAfee alerts for Improper Error Handling (Path:/siteminderagent/pwcgi/smpwservicescgi.exe

Query TARGET=http://www.mcafeesecure.com). Also there are 6 attempts to log in the administration panel from webappscanner@mcafeesecure.com or 117a977a-a99e@mcafeesecure.com

I deleted the spammy reviews, but in a few hours I received them again. I blocked the IP’s and put a restriction one IP to writes one review. I received only one review in a few hours. How to stop them?



I am not an expert but I think that somebody or something is trying to log in my account using mcafee. Is it possible to be a hacker attack?



Thank you in advance![/quote]



McAfee scans servers looking for vulnerabilities, then calls you up to sell you shit. Yes I know.

nope this is not mcafee this is just a simple masquarade as this has just been used from a subdomain of secure.com

[quote name=‘AmitP’]nope this is not mcafee this is just a simple masquarade as this has just been used from a subdomain of secure.com[/quote]



mcafeesecure.com



64.41.142.73



McAfee.com

535 Oakmead Pkwy.

Sunnyvale, CA 94086

United States



Master, Host hostmaster@MCAFEE.COM

535 Oakmead Pkwy

Sunnyvale, CA 94086

United States



Master, Host hostmaster@MCAFEE.COM

535 Oakmead Pkwy

Sunnyvale, CA 94086

United States



USW2.AKAM.NET

USC2.AKAM.NET

USW3.AKAM.NET



Google Page Rank : 7

Alexa Traffic Rank : 10,912



Created: 14-Mar-2008.

Updated: 12-Feb-2010

Expires: 14-Mar-2011.

Source: whois.tucows.com

That was a vulnerability scan and your server failed badly if it was able to do that much activity without getting blocked.

[quote name=‘JesseLeeStringer’]mcafeesecure.com



64.41.142.73



McAfee.com

535 Oakmead Pkwy.

Sunnyvale, CA 94086

United States



Master, Host hostmaster@MCAFEE.COM

535 Oakmead Pkwy

Sunnyvale, CA 94086

United States



Master, Host hostmaster@MCAFEE.COM

535 Oakmead Pkwy

Sunnyvale, CA 94086

United States



USW2.AKAM.NET

USC2.AKAM.NET

USW3.AKAM.NET



Google Page Rank : 7

Alexa Traffic Rank : 10,912



Created: 14-Mar-2008.

Updated: 12-Feb-2010

Expires: 14-Mar-2011.

Source: whois.tucows.com[/QUOTE]



hehe…oops, was reading the thread with my n900 and thought it was mcafee.secure.com :S



soz