You are not logged in.

#1 2010-02-08 8:20 pm

Mrwilson
Member
From: Knoxville Tn
Registered: 2009-03-03
Posts: 51
Website

Interesting Connection To Trend Micro

I was having visits from a Japanese IP that is registered both here and at Honeypot. (150.70.84.24 is registered here once)

IP's in the 150.70.84.151, 152 and 24 (comment spammers) range were consistently popping up when I visited my site to work or any reason.

Looked up the 150.70.84.151 IP at honeypot and found a rather different comment.

"The IP addresses 150.70.84.151 and 150.70.84.41 are commonly seen in my webserver logs whenever one of my customer (inclusive myself) are using TrendMicro Internet Security withe the Phishing Protection enabled.
In these cases a encoded request is sent to an akamai server (The html-header of the response says: TrendMicro Server). This akamai server then seems to initiate a replay of the request from the above mentioned IP addresses.
If the Phishing Protection is switched off, no more requests are generated.
In my particular case a Java applet does some data transport using the http protocol to my webserver and all the request are replayed, which first impacts my statistics and the commercial use of the service.
Dieter"

Link : http://www.projecthoneypot.org/ip_150.70.84.151

I turned off my trend micro page checking toolbar and the visits quit as suggested by dieter.  I thought this was strange as Trend micro has been discussed here in the past.

I just thought this an interesting find.

Offline

#2 2010-02-08 10:33 pm

malamute
Member
From: New Zealand
Registered: 2009-09-08
Posts: 164
Website

Re: Interesting Connection To Trend Micro

I got no reply from these morons when i sent an email to them asking what the hell was going on .


Spammers taste nice with plenty of curry,hides that horrible taste

Offline

#3 2010-02-08 10:46 pm

zaphod
Jägermonster
From: USA
Registered: 2008-11-22
Posts: 2,115
Website

Re: Interesting Connection To Trend Micro

Personal preference here... I run Opera, and it has page-check built in, and it does connect to Opera servers. You might give it a spin instead.

Zap smile


Get Protected, Stay Protected...
With ZB Block, GNU/GPL Freeware Anti-Spam/Anti-Hack protection for your php based website.

Offline

#4 2010-02-08 11:01 pm

Mrwilson
Member
From: Knoxville Tn
Registered: 2009-03-03
Posts: 51
Website

Re: Interesting Connection To Trend Micro

I shut the phishing toolbar off and no longer have a problem.  I also have been using Google Chrome a lot more for general surfing.

I occasionally get hit with them but It has to be someone Else's browser cause i can no longer tie it to my time on-site.

I just thought it was an add connection.  Trend Micro and a Japanese ISP

Offline

#5 2010-02-09 12:50 am

malamute
Member
From: New Zealand
Registered: 2009-09-08
Posts: 164
Website

Re: Interesting Connection To Trend Micro

As you say Zaphod "personal preferences here".I use netscape 9 and it used to connect to the netscape site without me doing anything so i blocked it.Is one thing i don't tolerate is some gee dambed software that  connects to a site on it's own like winblows media player.


Spammers taste nice with plenty of curry,hides that horrible taste

Offline

#6 2010-02-09 10:14 am

zaphod
Jägermonster
From: USA
Registered: 2008-11-22
Posts: 2,115
Website

Re: Interesting Connection To Trend Micro

Yes, but you can turn off the opera page check. So it's not really invasive. Also, no matter what browser you use, it probably will connect to verisign now and then to check the authenticity of a https: certificate.

I know alot of people that use services like this. For instance, Web of Trust, it's a popular firefox add-on, and uses user generated rankings to guage the safety of a site. For instance: www.stopforumspam.com.

Of course, if all these unknowns are too upsetting, you could use Lynx.

Zap big_smile


Get Protected, Stay Protected...
With ZB Block, GNU/GPL Freeware Anti-Spam/Anti-Hack protection for your php based website.

Offline

Board footer

Powered by FluxBB