On Fri, 4 Mar 2005 08:23:45 +0800, Anuerin Diaz <[EMAIL PROTECTED]> wrote:

> > might not be marketing, they might have been rooted and
> > a bot was attacking elsewhere. or worse.
> 
> tiger, tell me you were not serious with this remark. i cant figure
> out if you are kidding or not but i thought andy was kiddin on his
> parting sentence. hehehehe...

maybe andy was kidding :).  i didn't get that, if he was :).  i
wasn't though.  seriously if he found them by looking at his 
logs and there were ssh attempts then, unless the ssh attempts 
were by someone with legitimate access to andy's boxes, 
what he saw were either probes or password cracking attempts.

whichever they were, they're not good marketing.  

sabagay, i didn't consider that it might have been someone who
legitimately bought hosting, and then is using that hosting to
attack other hosts, in which case the provider isn't necessarily
rooted, they just gave access to someone unscrupulous.

the or worse was to consider the possibility that it was the hosting
provider itself (owners or sys-ads) who were doing the probing
themselves.  but that's probably unlikely and now my theory
reduces to one of their clients probing other hosts instead of
the provider being rooted or trying to root other boxes.

can't tell though, unless andy sends the provider his logs and
asks them to check which client of theirs was doing the probing.

tiger

-- 
Gerald Timothy Quimpo http://bopolissimus.blogspot.com
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
Public Key: "gpg --keyserver pgp.mit.edu --recv-keys 672F4C78"
                         Mene sakhet ur-seveh
--
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to