Re: possible cracking attempt

2007-04-02 Thread Sean Malloy
Thanks for all of the information it was very informative. -- Sean Malloy Registered GNU/Linux User #417855 Happy Hacking! ;-) www.catgrepsort.com

possible cracking attempt

2007-04-01 Thread Sean Malloy
I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest security advisory. I recently noticed some peculiar entries in my Apache error and access logs. From

Re: possible cracking attempt

2007-04-01 Thread Nick !
On 4/1/07, Sean Malloy [EMAIL PROTECTED] wrote: I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest security advisory. I recently noticed some peculiar entries in my Apache

Re: possible cracking attempt

2007-04-01 Thread Joachim Schipper
On Sun, Apr 01, 2007 at 04:23:07PM -0500, Sean Malloy wrote: I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest security advisory. I recently noticed some peculiar

Re: possible cracking attempt

2007-04-01 Thread Stuart Henderson
On 2007/04/01 23:51, Joachim Schipper wrote: Mar 31 07:35:06.510869 rule 7/(match) pass out on sk0: 192.168.1.200.80 211.100.33.61.18484: F 2034632638:2034632638(0) ack 3247563101 win 17520 (DF) You should figure out what this means; your web server, presumably, is blocked by pf. huh?

Re: possible cracking attempt

2007-04-01 Thread Joachim Schipper
On Sun, Apr 01, 2007 at 11:29:46PM +0100, Stuart Henderson wrote: On 2007/04/01 23:51, Joachim Schipper wrote: Mar 31 07:35:06.510869 rule 7/(match) pass out on sk0: 192.168.1.200.80 211.100.33.61.18484: F 2034632638:2034632638(0) ack 3247563101 win 17520 (DF) You should figure out

Re: possible cracking attempt

2007-04-01 Thread Pawel S. Veselov
Hello, Nick ! wrote: On 4/1/07, Sean Malloy [EMAIL PROTECTED] wrote: I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest security advisory. I recently noticed some

Re: possible cracking attempt

2007-04-01 Thread Nick !
On 4/1/07, Pawel S. Veselov [EMAIL PROTECTED] wrote: On 4/1/07, Sean Malloy [EMAIL PROTECTED] wrote: I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest security

Re: possible cracking attempt

2007-04-01 Thread Pawel S. Veselov
Nick ! wrote: On 4/1/07, Pawel S. Veselov [EMAIL PROTECTED] wrote: On 4/1/07, Sean Malloy [EMAIL PROTECTED] wrote: I just installed OpenBSD on my server in early March 2007. I am running an Apache web server out of my house. I am tracking 4.0 STABLE which I updated the day after the latest

Re: possible cracking attempt

2007-04-01 Thread Artur Grabowski
Nick ! [EMAIL PROTECTED] writes: Anyway, /htdocs/thisdoesnotexistahaha.php and '/w00tw00t.at.ISC.SANS.DFind:) show that it's just some kid learning the ropes. I wouldn't want to report him. Why not? Beat them up when they are young and maybe they'll learn to behave. You can't teach an old dog

Re: possible cracking attempt

2007-04-01 Thread Nick !
On 02 Apr 2007 03:16:20 +0200, Artur Grabowski [EMAIL PROTECTED] wrote: Nick ! [EMAIL PROTECTED] writes: Anyway, /htdocs/thisdoesnotexistahaha.php and '/w00tw00t.at.ISC.SANS.DFind:) show that it's just some kid learning the ropes. I wouldn't want to report him. Why not? Beat them up when

Re: possible cracking attempt

2007-04-01 Thread Theo de Raadt
Anyway, /htdocs/thisdoesnotexistahaha.php and '/w00tw00t.at.ISC.SANS.DFind:) show that it's just some kid learning the ropes. I wouldn't want to report him. Why not? Beat them up when they are young and maybe they'll learn to behave. You can't teach an old dog new tricks, so you

Re: possible cracking attempt

2007-04-01 Thread Artur Grabowski
Nick ! [EMAIL PROTECTED] writes: On 02 Apr 2007 03:16:20 +0200, Artur Grabowski [EMAIL PROTECTED] wrote: Nick ! [EMAIL PROTECTED] writes: Anyway, /htdocs/thisdoesnotexistahaha.php and '/w00tw00t.at.ISC.SANS.DFind:) show that it's just some kid learning the ropes. I wouldn't want to

Re: possible cracking attempt

2007-04-01 Thread Jacob Yocom-Piatt
Theo de Raadt wrote: Sure, but people with Walmart jobs are a whole lot less dangerous... talk about vendor lock-in! http://reclaimdemocracy.org/walmart/workers_locked_in.html