[EMAIL PROTECTED] wrote:
>
> TCP 111, TCP515, TCP 12345 are all wellknown hacks. It looks like
> you've been scanned for these hacks by some script kiddies. Sure is
> enough to wake you up, though. TCP 111 is RPC. TCP515 is LPD, TCP
> 12345 is some sort of trojan, I think NetBus. For more information on
> these hacks, check out http://www.securityfocus.com and search on
> these ports. You want to look up who owns these address ranges (at
> www.arin.net) and email the people in charge of their security issues.
> Include the logs, etc.. and voice your concerns. Don't expect an
> answer, but you may receive one. Either way, the incident is noted
> and you've pretty much done all you can do. You most likely have not
> been hacked, but this is intrusive behavior and needs to be addressed.
>
Don't expect much beyond a "hey, you're on the Internet, expect it".
I sent rr.com a message about some of their customers trying to crack my
systems by writing _vti_pvt subdirs in my ftp root (now how many people
are actually STUPID enough to put a world writable FTP root that is also
their Webserver root -- oh, yeah, I forgot, anyone stupid enough to put
IIS on the Internet with M$' defaults enabled, duh).
Anyway, their idiot response was: you permit anonymous FTP access and
that's all it was.
So if you have an rr.com account, sorry, but you're prohibited from
accessing my FTP server (get a new ISP). Irresponsible ISPs really need
to be forced off the Internet (I also believe anyone who puts a server
on the Internet should have to have a license as well, but that's
another story). Unfortunately, the trend for irresponsible (read
criminally negligent ISPs) is that they are growing. So expect this kind
of behavior and block their IPs. They're the only ones to suffer.
Ciao,
David A. Bandel
--
Focus on the dream, not the competition.
-- Nemesis Racing Team motto
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc
->http://linux.nf/mailman/listinfo/linux-users
