{"id":23254,"date":"2016-10-24T19:28:57","date_gmt":"2016-10-24T23:28:57","guid":{"rendered":"http:\/\/ssgreenberg.name\/PoliticsBlog\/?p=23254"},"modified":"2016-10-24T19:59:31","modified_gmt":"2016-10-24T23:59:31","slug":"web-site-hacking-perspective","status":"publish","type":"post","link":"https:\/\/ssgreenberg.name\/PoliticsBlog\/2016\/10\/24\/web-site-hacking-perspective\/","title":{"rendered":"Web Site Hacking Perspective"},"content":{"rendered":"

I thought this example might give a little perspective on web site hacking. On a different website from this one, my security software gave me this report on its recent activity.<\/p>\n

\"Blocked<\/p>\n

Two attacks are from the Ukraine (or Denmark) and seven from France. This is on a website that is fairly inactive.<\/p>\n

One attack computer has even been given a name<\/p>\n\n\n\n\n\n
Number<\/th>\nHost Name<\/th>\nIP Address<\/th>\n<\/tr>\n<\/thead>\n
1<\/td>\n195-154-240-176.rev.poneytelecom.eu<\/td>\n195.154.240.176<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

If you Google this domain name<\/a>, one of the responses is the following:<\/p>\n

\nThe spam comes from a serial spammer in Turkey, Turk Telecom (who ignore reports), but the domains are hosted by poneytelecom.eu which in turn is a client of Proxad.net, and Tiscali.fr (a fake domain).Jan 10, 2014\n<\/p><\/blockquote>\n

If you Google the other one<\/a> with IP address 193.201.224.177, you find that it is in Denmark<\/a>.<\/p>\n

You can even see what street it is on, if you want to visit.<\/p>\n

\n