[JohnWill]

Suspicions confirmed.

[TechGuy]

I unblocked that IP address, but it was just automatically blocked again for another attack. I emailed Donna directly to let her know, but I suspect she'll need to use a proxy to get in here and have a HJT expert help.

[JohnWill]

I think you're right.

[Blackmirror]

I have had a good going over


can find nothing suspicious

I have installed rubotted to monitor my pc
it should pick up if something is being naughty

Its a complete mystery at the minute but i like a challenge
All i can say is sorry Mike

[JohnWill]

WireShark is a network monitor that can log all the traffic on the network link. You could have that running and see if something ugly springs up and starts hammering on the site.

[TechGuy]

Do you have only one computer connected to that Internet connection? If so, make sure it's clean as well -- we're blocking your Internet IP address, not your specific computer. (Obviously, they're one in the same if you have only one computer.)

[Blackmirror]

i have 2 others and will check them
ones a macbook

[TechGuy]

The Mac is your problem!!

(JK, it's very unlikely.)

[TechGuy]

Also, I'd check for any other "unusual" software -- any strange plugins or antivirus that might be sending bad packets to our server, etc.

[Blackmirror]

Originally Posted by JohnWill

WireShark is a network monitor that can log all the traffic on the network link. You could have that running and see if something ugly springs up and starts hammering on the site.

thanks am running it now

[Blackmirror]

It wont save a log it crashes John wireshark


Mike will send the details tommorrow you need xxxxxxxxxxx

[TechGuy]

I just emailed Donna, but maybe some other folks can help -- I looked back at some of our server logs and if it looks like we're constantly getting requests from her computer on port 443 (HTTPS). Does anyone know of any program or setting that would cause her computer to be making requests on HTTPS (instead of HTTP) each time she loads a page? I've never seen it before, but it looks like that's what is happening.

[Blackmirror]

I am trying to close it

Port 443 is the standard port for SSL connections by the browser and just about any program that wants to to HTTPS for a connection.

[Blackmirror]

Is it possible that zone alarm and avast dont go together
never had this prob with avg and za ???

The penny drops a little

[JohnWill]

I'd suggest you lose ZA totally and just configure the Windows firewall. It gives decent protection, and won't screw things up like ZA frequently does.