PDA

View Full Version : any know what this msg mean ??



dr jones
06-29-2008, 06:57 AM
any know what this msg mean ??
im downloading this ***** from ##### and after an hours into i was clicking (iam using utorrent) below on the "general" to see the info for the torrent,and when i reach the "logger" section i see this msg "http:ip 122.200.64.24:bad username/password" any one know what it mean ??,is my utorrent getting hacked? or is the site iam downloading from getting hacked?,i have ask the staff there,and they dont seem to know what the problem is(because they have never seen this kind of msg before),any experts out there who can help me solve this mystery

1000possibleclaws
06-29-2008, 07:16 AM
preferences -> advanced -> webui

is everything blank there? if not then clear everything. If web interface is enabled and you've set a password then I'm guessing that is your problem

dr jones
06-29-2008, 07:25 AM
done
what does it got to do with webui??
i dont understand

Acumen
06-29-2008, 02:09 PM
done
what does it got to do with webui??
i dont understand
If your IP address is 122.200. 64.24, I think someone tried to access your utorrent client through http... in particular, through webui. Probably, utorrent logged an error because the "hacker" entered the wrong username/password combination.

... and when i reach the "logger" section i see this msg "http:ip 122.200.64.24:bad username/password" any one know what it mean ??
Yeah, I'd suggest disabling webui... or, if you use it, to change the listening port, since you need to know the listening port (one of ~65536 ports) in order to successfully elicit a response from webui. To me, it looks like you have enabled the default port, 8080, which is a big security No-no, since utorrent didn't specify the port in the log entry. It's like keeping the password of your linksys router as "admin." Everyone knows it.

You might want to change your IP address, too :P

dr jones
06-29-2008, 02:28 PM
which ports should i change it ??

Acumen
06-29-2008, 05:33 PM
which ports should i change it ??
A big, unused one.

dr jones
06-30-2008, 06:10 AM
isnt there a few website that can help with listening post
i close the webui function and it still happening
below is proof,any who can help me
http://i211.photobucket.com/albums/bb310/mikeiechan/utorrent.jpg

lysine
06-30-2008, 08:58 AM
why not ask someone who would know?

forum.utorrent.com

Acumen
06-30-2008, 10:19 AM
Yeah, let us know how it goes ;)

dr jones
07-03-2008, 06:02 AM
this is what i got from froum utorrent

Hack your computer? No
Hack your µtorrent? Yes

Hackers could bruteforce, man-in-the-middle, lucky guess your webui password if you have it enabled. This is NOT real easy.
what should i do??

zedex
07-03-2008, 06:43 AM
i suggest just to be sre , start everything all over again , delete utorrent and installed it back , change ur IP adress and change maybe some of the passwords you have , delete cookies and everything that has some history om your browser . i know it sounds a little bit harsh and paranoic but i would be scared as shit if something like that happens to me .

mummysboy
07-03-2008, 11:07 AM
My advice :

Ditch utorrent BETA and go for 1.7.7 Stable

Then Random PORT on every startup

And finally
either :
REPORT the ip - a Hack attempt is serious and i hate script kiddies who try and fook up our lifes.


OR

Use a substantial ipfilter

Not Peerguardian as they dont update anymore - but midnight torrents has an ip filter for Utorrent and it also allows you to manually add.