From owner-freebsd-questions  Thu Mar 29  9:23:57 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from unix.megared.net.mx (megamail.megared.com.mx [200.52.207.52])
	by hub.freebsd.org (Postfix) with ESMTP id 786A437B71D
	for <freebsd-questions@FreeBSD.ORG>; Thu, 29 Mar 2001 09:23:52 -0800 (PST)
	(envelope-from lcroker@unix.megared.net.mx)
Received: from localhost (lcroker@localhost)
	by unix.megared.net.mx (8.11.0/8.11.0) with ESMTP id f2THNHL73079;
	Thu, 29 Mar 2001 11:23:17 -0600 (CST)
	(envelope-from lcroker@unix.megared.net.mx)
Date: Thu, 29 Mar 2001 11:23:17 -0600 (CST)
From: Lu!s Croker <lcroker@unix.megared.net.mx>
To: Peter kok <cckok00@hotmail.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: message log from web server
In-Reply-To: <3AC3626E.B7D048FE@hotmail.com>
Message-ID: <Pine.BSF.4.21.0103291122450.71887-100000@unix.megared.net.mx>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


   That loks like a Buffer over flow attack... 



On Thu, 29 Mar 2001, Peter kok wrote:

> Date: Thu, 29 Mar 2001 11:27:26 -0500
> From: Peter kok <cckok00@hotmail.com>
> To: freebsd-questions@FreeBSD.ORG
> Subject: message log from web server
> 
> Hi all
> 
> I got the following messages from the web server and don't know what it
> is
> Please help
> 
> 
> Mar 13 16:04:07 web rpc.statd: invalid hostname to sm_stat:
> ^Xw^??^Xw^??^Yw^??^Y
> w^??^Zw^??^Zw^??^[w^??^[w^??%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x
> 
> %n^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> 
> ^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P^P
> Mar 14 03:32:38 web inetd[1124]: refused connection from 192.168.0.3,
> service te
> lnetd (tcp)
> 
> 
> 
> Thank you
> regards
> Peter
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message