Being hacked for SURE

Hey everyone. i am getting a DB error and I know that my
site, without a doubt, is trying to get hacked. Someone is simply
trying to add an entry to my DB. The problem is, they are using a
proxy server to chage their IP address at random, so I cannot just
capture the IP address and ban it. So my question is, what
suggestions do you have so I can stop this guy from trying to get
into my DB? My code is protected so I'm not really worried about
him getting in, I just want to prevent him from trying... I'm
thinking there is nothing I can do. But at least I know my code is
good :)

> Hey everyone. i am getting a DB error and I know that my
site, without a doubt,
> is trying to get hacked.
Why is it "without a doubt"? What's the evidence you have?
> Someone is simply trying to add an entry to my DB. The
How are they trying to do that?
> problem is, they are using a proxy server to chage their
IP address at random,
> so I cannot just capture the IP address and ban it. So
my question is, what
But the proxy server will still have an externally-facing IP
address, which
is what you should receive as your CGI.remote_addr value. It
doesn't
matter what their IP address is behind that. What version of
CF are you
running?
> suggestions do you have so I can stop this guy from
trying to get into my DB?
This is a network issue, not a CF issue. You'd be better off
asking on a
network forum than here.
> My code is protected
What do you mean by "[your] code is protected"? Is it your
code or your
data you're worried about (two different things; two
different issues; two
different solutions)?
How do you know how well it's protected?
> so I'm not really worried about him getting in, I just
> want to prevent him from trying... I'm thinking there is
nothing I can do.
I think there IS. But you're barking up the wrong tree (for
more than one
reason) asking here.
> But
> at least I know my code is good :)
From reading your post, and interpretting your understanding
of "how things
work", I'm not so sure of that, to be honest.
Take a step back, and ignore your preconceptions about what
is / is not
possible, and how good you think your code is... how is your
(perceived)
problem manifesting itself?
Adam

Similar Messages

Being hacked for a year. Need advice on viruses & malware

My ex-husband has been hacking my computers for about a year. I would like some advice on how to keep him off my computers. I can't keep him from hacking into AT&T's website, but I'd like to at least see if I can do something to get rid of him. A litle background. He is American but now lives in Bangalore, India. He is a brilliant man who lost his job and had months to look for a job and learn how to cyber-stalk me to shreds. He also has a friend who designs websites and owns the server which housed my blog. His friend got things started.
My ex-husband, as a I said, is brilliant. He is also a sociopath. So, any indication from me to him that he's making me angry or upset in any way is tantamount to "begging for my life". That's exactly what he wants. The only optioin I have is to deal with it on my own, as opposed to appealing to him to stop.
I regularly restore my computers (desktop, laptop, iPad, iPhone) to factory settings. I use iCloud for photos, calendar, address book, and music. Sharing is off. I'm sure my son's computer has stuff all over it. I no longer keep anything on my computers other than what's on iCloud. Any documents are created offline, saved to an external hard drive, and securley trashed afterward.
Here is a sampling of what he's done.
1. He can hack through any password. A friend, the head of Virginia Tech's IT department, told me that he must have purchased a password decorder, but I'm not so sure.
2. He can hack into any site. He regularly hacks into my iTuness account, AT&T, American Express, Comerica Bank, you name it. He used to change the passwords to everything at leave it at that, but things have gotten increasingly weird.
3. Now he doesn't bother to change the password. He hacks into things, and makes changes. I use my AMEX card or bank account to pay bills online. He changes the payment to a bogus one, so they don't get paid. He turns off notifications, so I don't know. I had my TV & inernet service turned off due to this. Now I know when my bills are due, and make sure things are okay.
4. He's phished me so I went to AT&T & American Express sites he created. He somehow was able to redirect me to a bogus career page for Restoration Hardware. I knew what I was supposed to see, so I used a friend's computer to get to the right page. He knew I was looking for a job there. He messed with my Flickr account, so they couldn't see my portfolio. I could see it, but a "regular" person would only see two weird photos.
5. I believe he's managed to hack into my gmail account & me.com accounts. @me is in the Cloud. I use 2-step verification and G@@gle authenticator.
6. I was working on my desktop, which logs out after 10 minutes. Ex-husband was angry with me at that moment (heard via my son). When I returned to log back in, I was locked out and had to restore my computer. My log in password was changed. I had just replied to an email sent to my @me account on that computer.
7. I left a document on my laptop because I ddin't care if he saw it. I prepared my computer to be restored and wanted to email the document to myself. I couldn't becasue there were all these other things attached to it. I wish I'd taken a screen shot of it. But there was a zip file, a jpeg and several other things.
Can anyone offer me any help? Now that I know there was junk attached to a document, does that mean my external hard drive is currupted by documents I've stored there? My passwords are looooong. I have a "best practices" system that I use. But still he manages to break through. Thoughts?
I use Mountain Lion 10.9.1

Thanks for replying. It's so nice to know someone is out there listening. I can't say I'm always immediately hacked. Things ebbed down for awhile and are now back up and running a bit. He have had a bad week at work. Or hates India. I just want to be left alone. Yet bad things are definitely being found on my computers. I hadn't thought of disconnecting everything from the Internet, but I have to have it turned on to install.
Question. If I'm resetting everything how can a keylogger stay onboard? I'm certain they were installed back when he had access to my computers (a desktop and laptop). I assumed these would disappear when I restored. Not true?
How can he download a keylogger over the Internet? I decided to restore after he hacked into Transunion's site. I didn't know what my password was. It wasn't written down. But he found a way on there. I'm sure I logged on from my laptop a month ago or so. Maybe he'd had it in his pocket, so to speak. But I wonder, since he's phished AMEX & AT&T, if he's become adept at hacking into their sites. ??? Way over my head.
Question 2: Today I was updating some Pages docs which I store on my USB memory stick. I keep the stick with me AT ALL TIMES. It's never in the house when I'm not there. Same with printed passwords - on a little crib sheet. I restored my laptop 2 days ago. So this was the first time I'd used the stick or any app (did install Firefox) since the restore. Suddenly there was a "restored files" in my trash. I checked inside the folder, still in the trash. There were lots of jpeg sort of colored squares. I didn't open anything, just threw over 100 things away securely. Is my USB stick infected? Clueless on this one. When I restored I didn't empty the "empty disk space".
Woe is me: When I reinstalled the operating system on my desktop today I was told some "additional" things were being downloaded. It's exhausting just trying to describe all this. Some things are perfectly normal. Others clearly aren't. I'm becoming more educated on the subject. But after a while I get confused. After all, it's a bit emotional.
I'm sure there are or were cameras and listening devices in my home. They were installed in our marital home before I moved out. But my ex now lives in India. And I use my laptop all over the house when I reinstall. So I don't think cameras are it.
At first I thought he was breaking into my house to look at my printed passwords. You can break through a dead bolt - I looked it up on YouTube. Easy step-by-step instructions for any future criminal! Who needs a real job these days? I should quit trying to do business online and take up burglary.
Final thought: Thank you so much for your ideas. I'd love to know about the keylogger situation. Meanwhile, it's well below freezing here. I'm freezing. I'm going to forget about this for the night, put 2 pairs of sweat pants on, my mittens, and pour myself a glass of wine. Truly, thank you so much.

Why I can not log in or connect my account on Apple idea?been trying many times..it says I can not connect server.seems something wrong or am I being hacked?

Seems i can not log in to my Apple ID account...been trying it for a lot of times.it says when I log in " I am pretending to be...etc and that my account might be at risk? Is my account being hacked for this matter? Need help.thanks!

I have now been able to log into my accounts for IMessage and to ITunes store; however, they are still unresponsive. My messages do not go through and the Store is still laggy as well. I will keep updating this discussion as I am constantly checking so I can use the Cloud and IMessage again.

Some of these services may be being used for hacking my Time Capsule?

Hi,
I was scanning services from a connected PC on my network but not directely in my time capsule and I picked these services below:
NetBIOS Session Services
SMB directy over IP
AFP over TCP
Apple Airport WAP Administration
SecureNet Pro Sensor https management server or apple airport admin
My question is: Some of these services may be being used for hacking my Time Capsule?
Attached SIMPLE DESIGN FROM MY HOME NETWORK,

Ok the TC did seem to get the raw end of the deal.. (I am not sure what the other end is.. cooked maybe??)
What model is it.. Gen1 or Gen2 are very prone to issue of overheat and eventual power supply failure.
See internet for loads of info on the issue.
Here is my version.
https://sites.google.com/site/lapastenague/a-deconstruction-of-routers-and-modem s/apple-time-capsule-repair
You can open the TC and remove the disk.. if it is still operational you can get your files.. Gen1 Hitachi drives are still going strong.. it is the power supply that goes.
Gen3 is a different issue..
Tell us your model number from the rubber foot label.. A1xxx??
Decide if repair is worthwhile.. with a bit of DIY a repair or replacement to the power supply can be made.
There is no space in the TC for dual drives.
And if the power supply goes anyway there is no recovery apart from pulling it apart.

HT1807 I am out of the country. I turned my cellular data off and connected to wiFi . However, it is still showing that i am connected to a network. How dan i be sure that i am not being charged for roaming?network , I am still showing a network

I am out of the country. I turned my cellular data off and connected to wiFi . However, it is still showing that i am connected to a network. How can i be sure that i am not being charged for roaming?

Make sure data roaming and cellular data is turned off. If you don't want to receive calls or SMS then put your phone in airplane mode and reactivate WiFi

Built-in iSight - how do you know for sure it is off?

I have a new iMac with built-in iSight. I have been checking into security software for my iMac and came across the program called Undercover by Orbicule. One of the functions of that program is that is utilizes the built-in iSight camera to take pictures of the room/person who potentially stole your computer. So that caused me to wonder how do I know for sure my built-in iSight camera is turned off and not accessible by some program outside of my control? I know the green light comes on if I use it in iMovie or something like that, but how do I know it isn't being hacked and used without my knowledge?

Black electrical tape.

Being hacked

I m not sure if I m being hacked. I went away on a trip, letf the computer at home, I always shut it down when I m away. when I came back some of the safari preferences were changed such as the home page, the default search engine, plus when I opened safari the window was smaller than I used to use it. a few days ago I received a notification which I didn t mind much saying that my IP adress was being used by another device and I thought it refered to my ipad.
what could be the problem?

Did anyone else have physical access to the MacBook while you were gone? It cannot have been hacked if it was turned off.
See this thread for a possible solution to the IP address issue.

Accounts being hacked and credit taken, new page a...

As the other page http://community.skype.com/t5/Security-Privacy-Trust-and/Incorrect-charge-of-100-Euros/td-p/867774 is now locked (wonder why) I have continued on here.
My account was hacked and all my credit used to call people all over the world. When that credit ran out they took €35 on the auto recharge that they activated ( I had it turned off)
I only found out I was being attacked when my PC sounded to say I had new messages and I saw they were from paypal for a skype recharge which I had not done.
I changed my passwords on paypal and skype right away and put in a charge dispute with paypal. I contacted Skype expecting to be told that it was under control and that I would be refunded, However instead I was told it was no problem there end and that it was my fault for letting the hackers guess or be given my password. They then fobbed me off and told me that paypal would refund the recharge but my credit I had before would not be refunded.
After looking on here I found that lots of others were also being hacked and fobbed of the same so I went back on the live chat and demanded my money back.
this morning I received this message and a refund of my lost credit.
Hello,
My name is Silja and I am contacting you in regards to your previous conversation in Chat Support, session 970704 and the problem you have with your "unauthorizedentry" account.
Please be so kind and accept my apologies for the issues you are having with your Skype account.
I have gone through the chat session you had before and I can see that you have been advised to change your password and follow the instructions on how to make sure that your PC is secure.
Regarding the fraudulent purchases made from your Skype account, I can see that you have already asked your PayPal office to reverse the fraudulent purchase made during this incident. This means that once your PayPal office has finished their process, you will get all the funds back you lost during this incident.
Also, I do understand how frustrating this incident must have been and there for I would like to offer you with a €15.00 Skype Credit voucher as a compensation of the lost time.
Again, I am very sorry for this issue and should you need further assistance, please do not hesitate to contact us again.
Have a nice day!
Best regards,
Silja
Skype Customer Service Specialist
It is very sad that I had to go demanding anything from them as they should have refunded me no questions.

reids5 wrote:
Hello I also have just realised I have had my skype account hacked, in the last two weeks, firstly i was talking to the maldives and then my credit in literally in 2 seconds went from $13.oo skype dollars to zero and I was cut off, on the 27th December I was charged twice on my account where only one credit showed up on my skype account of $16.00 dollars while, the other 16.00 skype dollars never appeared, on top of that I was just talking to day and had 13.00 in my account and then it just literally vanished in the middle of business deal while on the phone to the maldives.
Now its back to zero, where otherwise I have been talking to diefferent parts of the world, I'm not happy and need someone from skype to sort this mess out seems like you guys are being hacked from someone on the inside.
How do i get my credit back and how do i get my money back for credit i havent recieved, if i get my bank onot this you will get you butts kicked.
I think you may need to contact customer service regarding your concern. Just click the link below to see the instructions on how you can get in touch with the Support team ;
http://community.skype.com/t5/The-Skype-Lounge/How-to-Contact-Skype-Customer-Service/td-p/2056783
IF YOU FOUND OUR POST USEFUL THEN PLEASE GIVE "KUDOS". IF IT HELPED TO FIX YOUR ISSUE PLEASE MARK IT AS A "SOLUTION" TO HELP OTHERS. THANKS!
ALTERNATIVE SKYPE DOWNLOAD LINKS | HOW TO RECORD SKYPE VIDEO CALLS | HOW TO HANDLE SUSPICIOS CALLS AND MESSAGES
SEE MORE TIPS, TRICKS, TUTORIALS AND UPDATES in
| skypefordummies.blogspot.com |

Am I being charged for international texting?

So I am doing a masters program in Ireland, so I'm international. Everyone that I talk to back home has an iphone just like I do, and I have a question that I cannot find an answer to.
Since I'm in Ireland, I don't want to have a huge phone bill every month, so I have all forms of roaming off (voice, data, and international CDMA). I also have Cellular data off, as well as MMS and SMS messages.
I've checked under the current data usage period, and current period roaming, and the data usage is 0 . When my friend back home texts me, he says that they are sending to me as regular texts. He receives mine as regular texts as well unless I'm in a wifi area, then we are both send and receive them as Imessages.
My questions is that even with all roaming turned off, cellular, ect, I'm still able to send and receive text messages while I'm NOT in a wifi area. This only works for my friends and family that have Iphones, so I'm assuming that it means I'm okay to text them while I'm not connected to wifi?
one thing to mention, that since I'm in Ireland, my service provider at the top left of the screen no longer says AT&T. It says "Vodaphone IE" and sometimes changes to other names like Meteor, O2, and a couple others. My plan is still through AT&T, so i'm not sure why it changes over to those. Maybe that's why I'm able to send texts?
I just don't want to rack up a huge phone bill, not knowing I was accumulating international charges. Because if everything is turned off except for Imessage, and the data under cellular in settings isn't going up, then theoretically I'm not using data right? or that it should be free? I've been here about a month, and my mom pays the bill. She hasn't called to say that the phone bill was extremely large, but I don't wan't to text if there's some kind of risk. That being said, I would really appreciate some help with the above scenario that I just described, because this has me clueless.

If the messages you receive are coming in as green, then they're coming in as text messages. If you can, check your voice, data and text usage on AT&T's website - that will tell you for sure if you're being charged for anything.
~Lyssa

How can I check if I am being hacked? I think I am!

I am very suspicious that I am being hacked....like the kind where they can watch your screen and see through your webcam. How would I go about checking to see if this is true? Is there a way?
My computer has been freezing up and three times now a message box has popped up with the icon of the yellow triangle with an exclamation point inside, but before I can read what it says or manually close it, it goes away......
Also, I had posted this question before, along with a similar post on here yesterday, and they were beginning to receive comments back, and now they're gone. I haven't deleted anything from here, so does apple remove my posts, or is someone else....?
Any help is appreciated. Thanks!

need_help45 wrote: ... if there is a way to find out if I'm being hacked.
Hacking of webcam control need not be a concern for Mac OS X users.
If you are using Windows, you are wise to be cautious and take every possible precaution against Windows' security weaknesses, whether running on a PC or on a Mac (and whether via OS X Boot Camp or one of the PC emulators that runs inside OS X.)
For OS X Macs, the only way I know to make the webcam "hackable" would be for you (or someone else who had access access to your Mac) to modify or somehow damage your Mac or its software. Unless an "administrator" of your particular Mac has installed, activated, and authorized Apple Remote Desktop or some other software for remotely operating your Mac, it is highly unlikely that anyone can be using your cam without your explicit permission and action. The reliable way to prevent this is to carefully control physical access to your Mac so it cannot be modified.
However, if you are convinced that your Mac has unwanted software that you cannot identify, securely erase your entire startup disk. Then reinstall a fresh copy (not from your backups) of OS X and all necessary apps and updates. Finally, copy your important user data files to the fresh system from your backup to your fresh system.
Message was edited by: EZ Jim
Mac OSX 10.8.3

How can you tell if your computer is being hacked

We got a call this morning from someone at Microsoft stating that our computer is being hacked. I don't trust this notification.

jb --
I'm really glad you didn't fall for it. If you had let them into your computer, they would have stolen all your information. It makes me SO mad.

Can't get rid of the "your document is being tracked for reviews" message

I used Adobe Professional for the first time to conduct reviews on PDFs. I used the "Send for review by email" option. Now I am done with the review, have incorporated the comments, have compiled FrameMaker files, and produced a new PDF. But when I open the final PDF, I still get the message that you are opening a document that is being tracked for review. How do I make sure the message goes away?

Basically, while I was trying to figure out how I was going to send my forms to people, I tested the "Send for review by email" function, just as the OP did.
Pretty sure that's what triggered my form to be stuck in this "Marked for Review" mode.
Appreciate any help y'all can give me.
Again, I attached a screen shot of the pop-up in question

Being Charged for data plan I don't need

It's that time of the two year contract with two out of three phones up for a renewal on our contract. Two phones need to be replaced. I stop in at the local Verizon store to get our options, costs, etc. While discussing the two year contract and reviewing the phones my kids picked out, Joe (Verizon employee) informs me that the phones the kids picked out have a required a data plan that costs $9.99 a month. Now the phones the kids picked out are middle of the range text messaging phones. Not a Blackberry or a Droid.
I explain to Joe that I'm not interested in the data plan as the kids don't need internet service on their cell phones. This apparently does not matter to Verizon as this is a required charge now. Joe explains that I can block this service while still having to play $9.99 per phone each month. So that I get this straight, I asked Joe if my math was correct. I will be paying an additional $240 a year for a data plan service that I do not want or need? "Yes ma'am" was his reply. He then points me in the direction of the three flip phones that do not require a data plan. Now even this was laughable as he explains that these phones are more for the "elderly". Oh yeah, I'm going to bring my 2 teenagers into the store and point them over to the "elderly" phones. Ha!
Interestingly enough, I bought the EnV3 recently and did not have to purchase the data plan. To purchase the exact same EnV3 now, I would incur this data plan charge. This makes absolutely no sense to me other than Verizon being greedy.
So then I leave the store and walk directly over to another wireless store and ask one simple question. Do I have to pay for a service that 1) I don't want and 2) don't need? The answer was "no". He quoted the same phone plan to what I'm have now, but will not be charged for coverages I do not want. Off the bat, I'm saving $20 a month over Verizon. And he's comped two new phones for free. Nothing out of pocket for new phones. The man at this store then advised me to determine what my cancellation fees would be with Verizon in order to better make a decision on whether or not to switch.
I walk back to the Verizon store, put my name back into the system. While waiting, Julie (Verizon employee) asks me why I'm looking into cancelling my service. I explain the situation while she grins nicely and slightly nods her head. She has a teenage daughter and she understands. We discuss the need of limiting teenagers and internet service. She explained that even as an employee she had to pay for this service and did not want it. Well, Julie I have a choice.
I don't remember the name of the next VE but we review the cancellations fees etc. $225 due if I should cancel before my contract expires. (I can cancel during my contract and still not have to pay as much as incurring the new data plan charges.) He is doing everything he can at this point to keep my service. I ask him if he can waive a data plan service fees that I do not want. No, he cannot.
So thinking this whole through, I'm not willing to spend the extra money for a service that I do not want. I am not willing to provide my teens with a data plan on their cell phones that I have no control over. They have plenty of opportunities to access the internet without having it in their palm 24/7. Plus knowing teenagers, I wouldn't want to incur the add-on expenses for the data plan overrages. You know as well as I do, once they know they have it, it will be used and they will not have a clue on how to limit internet access. Yes, I am one of those moms that refuse to pay for everything their little hearts desire and like hell will I waste $240 a year because Verizon demands this data plan.
It's clear that Verizon does not have a clue on this. I would rather spend the $ to get out of a plan with a greedy company- than feed more money into their operation when they clearly don't have their finger on the pulse of what families need. So, after having been with Verizon Wireless for 14 years and quite happy with them and the service, I will be switching at the end of the month.

Dawn, I'm right there with you....
I've been a "Verizon" customer for over 15 years (records carried over from when I was Cellular One and they got bought out by VZW)... and I currently have 1 primary and 3 supplemental lines for family. In the past it was never a problem to get a multi-media phone for my teen because he likes to have his music with him.. obviously... he's a teen. And in the past there has NEVER been a charge for any time of "data plan" for the MM phones.. which is good. So now his phone is eligible for an upgrade, and he'd like to have the EnV3 which has the MM features. However good ol' VZW being the monopoly that they are now wants a long time customer to pay for a data plan....a $9.99/month data plan for 25MB downloads. More over, in order to ensure my teen doesn't surpass the 25MB/month, I'd have to subscirbe (at an additional price of $4.99/month) for Usage Control features for the line. So now VZW wants this line to go from being a simple $9.99/month to $25.00 just because a MM phone??!! What's worse, is that my teen already has an LG Voyager (a MM phone), yet I have services for mobile web, data downloads and such BLOCKED on his line. So answer me this... why should I have to mandatorily pay a mandatory $15/month fee for a service I'm not using in the first place?!!
VZW has slowly but surely penny-anny'd their customers over the years and I'm finally fed up with it. Time to switch. Even if the other carriers do require a data plan with their phones, at least I'll know what I'm getting up front and no suprises along the way. VZW's "New every two" means NEW AND MORE CHARGES EVERY 2 YEARS... that's for sure!

My daughter used her friends apple account to login on her ipad and then the mother of her friend thought it was being hacked and consequently tracked the ipad and my daughter lost all her photos. Can we get these back?

My daughter used her friends apple account to login on her ipad and then the mother of her friend thought it was being hacked and consequently tracked the ipad and my daughter lost all her photos. Can we get these back?

Your iOS device backup only includes data and settings stored on your device. It doesn’t include data already stored in iCloud, for example contacts, calendars, bookmarks, mail messages, notes, shared photo albums, iCloud Photo Library beta, My Photo Stream, and documents you save in iCloud using iOS apps and Mac apps.

HT4848 Is it possible to partition an external hard drive that is already being used for Time Machine backups without it being erased?

I'm want to use my current external hard drive, which I use for Time Machine Backup, as a recovery disk for Mac OS X Mountain Lion 10.8.2. From what I have read, the recovery disk assistant will erase all data on the external drive unless it is partitioned. Can I partition my current backup drive without erasing it, even though it is already being used for Time Machine?

It's very simple to test. Turn off your computer. Have your time machine backup plugged in. Hold option and turn it on, keeping option held. Do you see your time machine drive? If so, select it and press enter. You'll end up in recovery. If it works, there you go. Then just click the apple and restart to get back to your regular desktop. Then you'll know for when you're ready to do the deed.
Edit...
I'm not sure if time machine will think it's an entirely different computer, though, when a hard drive changed, making an actual restore not doable. Either way, you could still reinstall mt lion fresh and then just migrate after, skipping the need for SL.

Being hacked for SURE

Similar Messages

Maybe you are looking for