From owner-freebsd-questions@FreeBSD.ORG  Mon Apr 19 06:17:40 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9F2BD16A4CE
	for <freebsd-questions@FreeBSD.org>;
	Mon, 19 Apr 2004 06:17:40 -0700 (PDT)
Received: from shaft.techsupport.co.uk (shaft.techsupport.co.uk
	[212.250.77.214])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5149F43D41
	for <freebsd-questions@FreeBSD.org>;
	Mon, 19 Apr 2004 06:17:40 -0700 (PDT)
	(envelope-from setantae@submonkey.net)
Received: from cpc2-cdif3-6-0-cust204.cdif.cable.ntl.com
	([81.103.67.204] helo=shrike.submonkey.net ident=mailnull)
	by shaft.techsupport.co.uk with esmtp (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.31; FreeBSD)
	id 1BFYeZ-000J95-1K; Mon, 19 Apr 2004 14:17:39 +0100
Received: from setantae by shrike.submonkey.net with local (Exim 4.32;
	FreeBSD)	id 1BFYeW-00042W-HT; Mon, 19 Apr 2004 14:17:36 +0100
Date: Mon, 19 Apr 2004 14:17:36 +0100
From: Ceri Davies <ceri@submonkey.net>
To: "James T. Harrison" <james@aricsi.com>
Message-ID: <20040419131736.GD608@submonkey.net>
Mail-Followup-To: Ceri Davies <ceri@submonkey.net>,
	"James T. Harrison" <james@aricsi.com>, freebsd-questions@FreeBSD.org
References: <000801c4260a$ab688a20$87312330@icsi.local>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt"
Content-Disposition: inline
In-Reply-To: <000801c4260a$ab688a20$87312330@icsi.local>
X-PGP: finger ceri@FreeBSD.org
User-Agent: Mutt/1.5.4i
Sender: Ceri Davies <setantae@submonkey.net>
cc: freebsd-questions@FreeBSD.org
Subject: Re: comments
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Apr 2004 13:17:40 -0000


--pf9I7BMVVzbSWLtt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 19, 2004 at 07:34:31AM -0500, James T. Harrison wrote:
> My server had some apps running that should not have been there.  You hav=
e a hacker using your site to gather info on servers. =20
>=20
> What are your plans to stop?  What is your phone number and contact name?

The perpetrator here is just downloading a random file from various servers.
Note the=20

echo *-------------------------------------------------------------------*>=
>info.txt
echo *--Result of speed test from various countries....  --*>>info.txt
echo *-------------------------------------------------------------------*>=
>info.txt

comment.

He could just as easily have used any public FTP servers - FreeBSD.org
is not involved in this.

Ceri
--=20

--pf9I7BMVVzbSWLtt
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAg9FwocfcwTS3JF8RAtg6AKCefjckYuOmPdoCrLDiMxRwrhDsrACgxmg2
93uPFEN5HQCjBeLVSaHLshk=
=ItWd
-----END PGP SIGNATURE-----

--pf9I7BMVVzbSWLtt--