From owner-freebsd-security Sun Jan 9 14:50:38 2000 Delivered-To: freebsd-security@freebsd.org Received: from mx.cti.gr (kronos.cti.gr [150.140.1.25]) by hub.freebsd.org (Postfix) with SMTP id 8E9801533C for ; Sun, 9 Jan 2000 14:50:26 -0800 (PST) (envelope-from keramida@diogenis.ceid.upatras.gr) Received: (qmail 19809 invoked from network); 9 Jan 2000 22:50:22 -0000 Received: from pc-argos-async2.achaios.ypepth.gov.gr (HELO localhost.hell.gr) (150.140.30.22) by kronos.cti.gr with SMTP; 9 Jan 2000 22:50:22 -0000 Received: (qmail 16449 invoked by uid 1001); 9 Jan 2000 13:28:04 -0000 Date: Sun, 9 Jan 2000 15:28:04 +0200 From: Giorgos Keramidas To: "Chris Cason work\"" Cc: "freebsd-security@FreeBSD.ORG" Subject: Re: Port scans and site theft from IP inside mr.net Message-ID: <20000109152804.C15437@hades.hell.gr> Reply-To: keramida@ceid.upatras.gr References: <200001071420.JAA75362@povray.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre3i In-Reply-To: <200001071420.JAA75362@povray.org> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, Jan 08, 2000 at 01:19:17AM +1100, Chris Cason work" wrote: > > Thanks all for your assistance. We've been able to confirm that the > telnet prompt that the box gives is from Netware (I never expected to > see someone port-scanning and site-sucking from a netware box). And > no-one can see the HTTP server anymore, so I presume he's taken that > down. I still can't get a connection to the HTTP server in question, after more than 2 days have passed. It seems that it has been taken down for some time. Nevertheless, nothing can inhibit the Joen Doe who did it to put the site back online shortly after. > Oh, and apologies for posting earlier on using a winblows character > set ; I was at work at the time and I'm a bit unfamiliar with Outlook > Express :( Oh well... it seemed one of the most elegantly formatted Outlook postings that I've ever seen. Good wrapping, clearly separated paragraphs, I didn't even notice that the headers contained Outlook :) Ciao -- Giorgos Keramidas, < keramida @ ceid . upatras . gr > "What we have to learn to do, we learn by doing." [Aristotle] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message