From owner-freebsd-stable Thu Dec 27 19:24:49 2001 Delivered-To: freebsd-stable@freebsd.org Received: from sage-american.com (sage-american.com [216.122.141.44]) by hub.freebsd.org (Postfix) with ESMTP id E01B137B405 for ; Thu, 27 Dec 2001 19:24:43 -0800 (PST) Received: from SAGEONE (adsl-64-219-21-136.dsl.crchtx.swbell.net [64.219.21.136]) by sage-american.com (8.9.3/8.9.3) with SMTP id VAA24941; Thu, 27 Dec 2001 21:24:37 -0600 (CST) Message-Id: <3.0.5.32.20011227212435.01797558@mail.sage-american.com> X-Sender: jacks@mail.sage-american.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32) Date: Thu, 27 Dec 2001 21:24:35 -0600 To: "Peter Ong" , "Julien B." From: jacks@sage-american.com Subject: Re: Trying NT Hacks Cc: In-Reply-To: <018901c18f4c$22402480$0101a8c0@haloflightleader.net> References: <013a01c18f48$f156cf20$0101a8c0@haloflightleader.net> <20011228035757.A99350@harimandir> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I put up a brand new server with a brand new IP and the attacks were immediate.... so, I figured they are just running loose in swarms... At 07:02 PM 12.27.2001 -0800, Peter Ong wrote: >Really... I just wonder how they figure out the IPs, other than randomly >guessing. Someone did mention that, and I guess there really aren't that >many IP addresses that a computer could randomly generate in a short amount >of time without covering the whole spectrum. > >Peter >----- Original Message ----- >From: "Julien B." >To: "Peter Ong" >Cc: >Sent: Thursday, December 27, 2001 6:57 PM >Subject: Re: Trying NT Hacks > > >> On Thu, Dec 27, 2001 at 06:39:58PM -0800, Peter Ong wrote: >> > I don't know what it is with some people. I post my site here today >because >> > I was wondering about why the initial page was gibberrish, and then I >get >> > crackers. I finally get home, and I'm reviewing my log files, and I'm >> > seeing some folks trying to use IIS/NT exploits on my FreeBSD machine. >It's >> > infuriating. >> > >> >> My logs are full of these too, and getting bigger and bigger everyday. >Most of >> these "attacks" comes from some Windows worms. I'm totally amazed through, >as >> i get one such connection every 10 minuts, and my web server is not even >> public. >> >> Regards >> >> Julien B >> >> >> > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-stable" in the body of the message > > Best regards, Jack L. Stone, Server Admin Sage-American http://www.sage-american.com jacks@sage-american.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message