Date: Thu, 27 Dec 2001 18:53:38 -0800 From: "Peter Ong" <peter@haloflightleader.net> To: "Kutulu" <kutulu@kutulu.org>, <stable@FreeBSD.ORG> Subject: Re: Trying NT Hacks Message-ID: <016001c18f4a$da2fc480$0101a8c0@haloflightleader.net> References: <013a01c18f48$f156cf20$0101a8c0@haloflightleader.net> <00be01c18f62$d67b5b20$88682518@cc191573g>
next in thread | previous in thread | raw e-mail | index | archive | help
I guess I'm judging too quickly. Anyway, there hasn't been a successful break in just yet. Now I'm wondering if there's some extra precautions I can take to ensure that a break in doesn't occur. Peter ----- Original Message ----- From: "Kutulu" <kutulu@kutulu.org> To: "Peter Ong" <peter@haloflightleader.net>; <stable@FreeBSD.ORG> Sent: Thursday, December 27, 2001 9:45 PM Subject: Re: Trying NT Hacks > From: "Peter Ong" <peter@haloflightleader.net> > Sent: Thursday, December 27, 2001 6:39 PM > > > > I don't know what it is with some people. I post my site here today > because > > I was wondering about why the initial page was gibberrish, and then I get > > crackers. I finally get home, and I'm reviewing my log files, and I'm > > seeing some folks trying to use IIS/NT exploits on my FreeBSD machine. > It's > > infuriating. > > I have some bad news for you. Those hack attempts weren't because you > posted a URL here. They were because you have a web server. Put up a web > server on any IP, without so much as a DNS A record for the IP, and wait an > hour. You'll have code red all over your logfiles. > > It may or may not do much good, but try emailing the owners of some of the > IP's that hit you. Odds are very very high that they are 'innocent' victims > running unpatched IIS servers that may not even know they're probing you. > And if they have any semblance of clue, they might fix it. > > --K > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?016001c18f4a$da2fc480$0101a8c0>