[lug] What do you do about hackers (in the current sense of uninvited obnoxious intruders)

Paul Bille Paul at ebille.cudenver.edu
Sun Apr 14 14:12:00 MDT 2002


>> ran 89 probes in the minute
>  Sounds like nessus or something similar.

I'm not familiar with nessus.  Is that the name of a root kit?

> Save your time for something more fun! t-online is germanys largest
provider
(former state telecom a.k. "Deutsche Bundespost" ) . . .  In my experience
t-online couldn't care less

Guess you're right.  The scans continue to come in today.  I only got one
probe last night and it came from, you guessed it, t-online.

80.128.92.126 - - [14/Apr/2002:05:22:11 -0600] GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c: HTTP/1.1 404 319
80.128.92.126 - - [14/Apr/2002:05:22:12 -0600] GET
/scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir+c: HTTP/1.1 404 322

Name:    p50805C7E.dip.t-dialin.net
Address:  80.128.92.126

Paul
http://bille.cudenver.edu/author





More information about the LUG mailing list