Hi,
tonight, somebody had tried hack our Tomcat 3.2.3 in win2000.
Here is the log:
2001-12-13 01:18:35 - Ctx( ): 404 R( + /scripts/root.exe + null) null
2001-12-13 01:18:36 - Ctx( ): 404 R( + /MSADC/root.exe + null) null
2001-12-13 01:18:42 - Ctx( ): 404 R( + /c/winnt/system32/cmd.exe + nul
It's a Code Red or Nimba attack, probably from an infected IIS server.
On Thu, Dec 13, 2001 at 01:04:51PM -0500, Evgeniy Strokin wrote:
> Hi,
> tonight, somebody had tried hack our Tomcat 3.2.3 in win2000.
> Here is the log:
>
> 2001-12-13 01:18:35 - Ctx( ): 404 R( + /scripts/root.exe + null)
NIMDA
...
Just put a file there for it to get ;-)
D
Evgeniy Strokin wrote:
> Hi,
> tonight, somebody had tried hack our Tomcat 3.2.3 in win2000.
> Here is the log:
>
> 2001-12-13 01:18:35 - Ctx( ): 404 R( + /scripts/root.exe + null) null
> 2001-12-13 01:18:36 - Ctx( ): 404 R( + /MSADC/ro
trying hack me, what they really wanted?
Hi,
tonight, somebody had tried hack our Tomcat 3.2.3 in win2000.
Here is the log:
2001-12-13 01:18:35 - Ctx( ): 404 R( + /scripts/root.exe + null) null
2001-12-13 01:18:36 - Ctx( ): 404 R( + /MSADC/root.exe + null) null
2001-12-13 01:18:42 - Ctx( ): 404 R
I get those all the time. I wish I could put a sign on my computer
that says, "You're wasting your time. This machine is running
Tomcat/Linux. Find someone running Windows". On a more serious note,
this is a computer hacking attack, and it comes accross state lines.
Could I get the FBI to inv
, 2001 2:48 PM
To: [EMAIL PROTECTED]
Subject: Re: somebody trying hack me, what they really wanted?
I get those all the time. I wish I could put a sign on my computer
that says, "You're wasting your time. This machine is running
Tomcat/Linux. Find someone running Windows". On a mo
TED]]
Sent: Thursday, December 13, 2001 21:38
To: 'Tomcat Users List'
Subject: RE: somebody trying hack me, what they really wanted?
HA! your funny! FBI stop building your Magic Lantern and come find the poor
sap that is trying to hack my free software nothing invested but time server
sit
> HA! your funny! FBI stop building your Magic Lantern and come find the poor
> sap that is trying to hack my free software nothing invested but time server
> sitting in my broadband closet!
> Ya Right!
It was just a thought. I hope the FBI has better things to be
doing...
--
To unsubscribe:
.adsl4linux.nl (it's a dutch site I'm sorry..)
> >
> > Mvgr,
> > Martin
> >
> > -Original Message-
> > From: Brian Adams [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, December 13, 2001 21:38
> > To: 'Tomcat Users List'
> > Subject:
My linux server has been attacked too for a couple of weeks. I don't care
Dom
- Original Message -
From: "Jim Urban" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Thursday, December 13, 2001 7:07 PM
Subject: RE: somebody tr
just for statistics, how many of you run tomcat
directly without apache/iis, with your machine
being on the internet.
All the responses for this thread indicate they
do so. Be careful, I know of one machine which
was compromised and which had tomcat on 80.
although I am not sure that hack was thr
I'm on two different servers
- Original Message -
From: "E B" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Friday, December 14, 2001 9:28 AM
Subject: Re: somebody trying hack me, what they really wanted?
> just fo
I do
- Original Message -
From: "E B" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Friday, December 14, 2001 04:28 AM
Subject: Re: somebody trying hack me, what they really wanted?
> just for statistics, how many of you run t
13 matches
Mail list logo
