Bitcoin Forum
November 12, 2024, 02:57:17 AM *
News: Check out the artwork 1Dq created to commemorate this forum's 15th anniversary
 
   Home   Help Search Login Register More  
Warning: One or more bitcointalk.org users have reported that they strongly believe that the creator of this topic is a scammer. (Login to see the detailed trust ratings.) While the bitcointalk.org administration does not verify such claims, you should proceed with extreme caution.
Pages: [1]
  Print  
Author Topic: Possible Attack starting Bit Coin  (Read 3493 times)
crazyearner (OP)
Legendary
*
Offline Offline

Activity: 1820
Merit: 1001



View Profile
December 13, 2012, 08:25:35 PM
 #1

Hello everyone am not 100% sure of this but am making people aware of it. My anti virus and malware detection just went bonkers and blocked the following for BitCoin

IP-BLOCK   222.65.39.112 (Type: outgoing, Port: 61224, Process: bitcoin-qt.exe)

IP address [?]:   222.65.39.112 [Whois] [Reverse IP]
IP country code:   CN
IP address country:    China
IP address state:    Shanghai
IP address city:    Shanghai
IP address latitude:    31.0456
IP address longitude:    121.3997
ISP of this IP [?]:    ChinaNet Shanghai Province Network
Organization:    ChinaNet Shanghai Province Network
Host of this IP: [?]:    112.39.65.222.broad.xw.sh.dynamic.163data.com.cn

This has been blocked on a number of ports.

Anyone know anything about this?

=
  R E B E L L I O U S 
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  R E B E L L I O U S
crazyates
Legendary
*
Offline Offline

Activity: 952
Merit: 1000



View Profile
December 13, 2012, 08:36:12 PM
 #2

Most AV don't like bitcoin, so take whatever it tells you with a grain of salt.

As far as the specifics of that address, idk.

Tips? 1crazy8pMqgwJ7tX7ZPZmyPwFbc6xZKM9
Previous Trade History - Sale Thread
crazyearner (OP)
Legendary
*
Offline Offline

Activity: 1820
Merit: 1001



View Profile
December 13, 2012, 09:39:15 PM
 #3

Most AV don't like bitcoin, so take whatever it tells you with a grain of salt.

As far as the specifics of that address, idk.

Ok cool cool Smiley just was not sure so posted on here as am still got a lot to learn in the BTC world. Thx for the heads up and info

=
  R E B E L L I O U S 
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  R E B E L L I O U S
exotime
Newbie
*
Offline Offline

Activity: 28
Merit: 0


View Profile
December 13, 2012, 10:55:44 PM
 #4

Most mining applications are ranked as malware (by association) by various AV companies, as they've been bundled with worms and other nasties before.
hamdi
Hero Member
*****
Offline Offline

Activity: 826
Merit: 500



View Profile
December 13, 2012, 11:08:43 PM
 #5

use linux for bitcoin related stuff,

even better, just use linux for everything Smiley
chewie
Member
**
Offline Offline

Activity: 75
Merit: 10


View Profile
December 15, 2012, 02:39:57 AM
 #6

Which antivirus software are you using?  I'm curious.
BitcoinOxygen
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250



View Profile WWW
December 15, 2012, 10:21:16 AM
 #7

Which antivirus software are you using?  I'm curious.

Even i would like to know the anti-virus software you are using.

BTCOxygen PPS Mining Pool 2% Fee  <<<  Join Now
ATC777
Member
**
Offline Offline

Activity: 112
Merit: 10



View Profile WWW
December 16, 2012, 05:20:33 AM
 #8

Which antivirus software are you using?  I'm curious.

Even i would like to know the anti-virus software you are using.

Me three! But I'll go out on a limb here and guess that it's either Norton of MacAffee lol...  Grin

Epic Coinage -- Gold, Silver, Bitcoin, Exchange, Apparel, Electronics and more!

Check the official trade thread for full list of products and services!

Tips :: 13M9QLc5BDQe2iuB1N3Br58fYvJF5ixihT
crazyearner (OP)
Legendary
*
Offline Offline

Activity: 1820
Merit: 1001



View Profile
January 08, 2013, 02:10:49 AM
 #9

Which antivirus software are you using?  I'm curious.

Even i would like to know the anti-virus software you are using.

Me three! But I'll go out on a limb here and guess that it's either Norton of MacAffee lol...  Grin

Wrong on both of them will never use them B!tches lol

Am using avast internet security. However it did not pick up on that. It was malware bytes that kept stopping and blocking it on the ports.

=
  R E B E L L I O U S 
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  ▄▀▀▀▀▀▄▄                           ▄▄▀▀▀▀▀▄
▄▀        █▄▄                     ▄▄█        ▀▄
█            █████████████████████            █
█▄          ██       ██ ██       ██          ▄█
█        █            █            █        █
  █    █               █               █    █
   █ ██               █ █               ██ █
    █ █               █ █               █ █
    █ ███▄  █████▄   ██ ██   ▄█████  ▄███ █
    █     ███     █         █     ███     █
     █   █   ▀███ █  █   █  █ ███▀   █   █
     █   █      █ █  █   █  █ █      █   █
     █   █      ██  █     █  ██      █   █
      █  █     ██  █       █  ██     █  █
      █  █    ██  █ ███████ █  ██    █  █
      █ ███   ██  █         █  ██   ███ █
       █   ▀███      █   █      ███▀   █
        █     ██       █       ██     █
         █      █   ▄▄███▄▄   █      █
          ███   ███▀       ▀███   ███
             █████           █████
                  ███████████
  R E B E L L I O U S
crazyates
Legendary
*
Offline Offline

Activity: 952
Merit: 1000



View Profile
January 08, 2013, 02:27:30 AM
 #10

Which antivirus software are you using?  I'm curious.
Even i would like to know the anti-virus software you are using.
Me three! But I'll go out on a limb here and guess that it's either Norton of MacAffee lol...  Grin
Wrong on both of them will never use them B!tches lol

Am using avast internet security. However it did not pick up on that. It was malware bytes that kept stopping and blocking it on the ports.
Malwarebytes is a great scanner, but it's real-time protection could use some work. I have it detect false-positives all the time on customer's machines. I've actually stopped recommending the paid version until it gets a little more polished.

Tips? 1crazy8pMqgwJ7tX7ZPZmyPwFbc6xZKM9
Previous Trade History - Sale Thread
ATC777
Member
**
Offline Offline

Activity: 112
Merit: 10



View Profile WWW
January 08, 2013, 04:50:47 AM
 #11

Malwarebytes is a great scanner, but it's real-time protection could use some work. I have it detect false-positives all the time on customer's machines. I've actually stopped recommending the paid version until it gets a little more polished.

I use it for just that: a scanner. For real-time protection I suggest finding other solutions. MBam is no doubt a damn good program though. I've used it to bust some ugly viruses and malware before and it ran through them like a train.

Epic Coinage -- Gold, Silver, Bitcoin, Exchange, Apparel, Electronics and more!

Check the official trade thread for full list of products and services!

Tips :: 13M9QLc5BDQe2iuB1N3Br58fYvJF5ixihT
Kluge
Donator
Legendary
*
Offline Offline

Activity: 1218
Merit: 1015



View Profile
January 08, 2013, 05:38:06 AM
 #12

Hello everyone am not 100% sure of this but am making people aware of it. My anti virus and malware detection just went bonkers and blocked the following for BitCoin

IP-BLOCK   222.65.39.112 (Type: outgoing, Port: 61224, Process: bitcoin-qt.exe)

IP address [?]:   222.65.39.112 [Whois] [Reverse IP]
IP country code:   CN
IP address country:    China
IP address state:    Shanghai
IP address city:    Shanghai
IP address latitude:    31.0456
IP address longitude:    121.3997
ISP of this IP [?]:    ChinaNet Shanghai Province Network
Organization:    ChinaNet Shanghai Province Network
Host of this IP: [?]:    112.39.65.222.broad.xw.sh.dynamic.163data.com.cn

This has been blocked on a number of ports.

Anyone know anything about this?
Bitcoin is p2p, so you're connecting to various international nodes. Your anti-virus doesn't like one of the peers you connected to, for whatever reason. I'm assuming something similar would eventually happen if you used something like a torrent program.

Probably shouldn't worry about individual IP bans, since there are plenty of peers to choose from. If the AV program blocks Bitcoin from using those ports on an application level, though, you'll want to modify your AV settings to allow Bitcoin. If you're really concerned, though, you could use something like PeerBlock in conjunction with AV software, which can pull lists to block whatever types of entities you'd like per IP instead of per application.
Graet
VIP
Legendary
*
Offline Offline

Activity: 980
Merit: 1001



View Profile WWW
January 10, 2013, 09:23:14 AM
 #13

Which antivirus software are you using?  I'm curious.

Even i would like to know the anti-virus software you are using.

Me three! But I'll go out on a limb here and guess that it's either Norton of MacAffee lol...  Grin

Wrong on both of them will never use them B!tches lol

Am using avast internet security. However it did not pick up on that. It was malware bytes that kept stopping and blocking it on the ports.

Avast is rubbish, support worse
https://bitcointalk.org/index.php?topic=14085.msg899895#msg899895

one of their customers
https://bitcointalk.org/index.php?topic=14085.msg901620#msg901620
check the link they give to info about the issue :/



| Ozcoin Pooled Mining Pty Ltd https://ozcoin.net Double Geometric Reward System https://lc.ozcoin.net for Litecoin mining DGM| https://crowncloud.net VPS and Dedicated Servers for the BTC community
crazyates
Legendary
*
Offline Offline

Activity: 952
Merit: 1000



View Profile
January 10, 2013, 02:51:24 PM
 #14

I used to love Avast. Now I use MSE.

Tips? 1crazy8pMqgwJ7tX7ZPZmyPwFbc6xZKM9
Previous Trade History - Sale Thread
Grover
Full Member
***
Offline Offline

Activity: 137
Merit: 100


I was thinking Stay Puft, but Gozer said Grover


View Profile
March 03, 2013, 12:31:02 AM
 #15

Since most viruses now are really malware I use peerblock.  There are large lists of IP's  you can download and block or allow, and you can customize it too.
ChipGeek
Full Member
***
Offline Offline

Activity: 198
Merit: 100


View Profile
March 06, 2013, 10:21:25 PM
 #16

Two days ago AVG (Anti Virus Gold) updated and decided it should delete cgminer.exe and the zip file I got it from.

Grrr....

What is MSE?

Tip jar: 1ChipGeeK7PDxaAWG4VgsTi31SfJ6peKHw
serraz
Sr. Member
****
Offline Offline

Activity: 332
Merit: 250



View Profile
March 06, 2013, 10:30:06 PM
 #17

Two days ago AVG (Anti Virus Gold) updated and decided it should delete cgminer.exe and the zip file I got it from.

Grrr....

What is MSE?

AVG Free doesnt pick any of them up as a virus. For anyone using windows i reccomend Kaspersky has done so much good for every machine ive used it on. also doesent pick up the bitcoin stuff as viruses.
nbtcminer
Sr. Member
****
Offline Offline

Activity: 249
Merit: 250


View Profile
March 06, 2013, 10:46:15 PM
 #18

Two days ago AVG (Anti Virus Gold) updated and decided it should delete cgminer.exe and the zip file I got it from.

Grrr....

What is MSE?

MSE = Microsoft Security Essentials
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!