Re: [SLE] Scanned, hacked, or what?
From: David Rankin (drankin_at_cox-internet.com)
Date: 09/15/04
- Previous message: stephen: "Re: [SLE] LVM partitions not getting mounted"
- In reply to: James Hatridge: "[SLE] Scanned, hacked, or what?"
- Next in thread: Carlos E. R.: "Re: [SLE] Scanned, hacked, or what?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
To: <James.Hatridge@epost.de> Date: Wed, 15 Sep 2004 16:19:28 -0500
James wrote:
This covered about 10 pages or so. Looking thru the log I found the same
thing
three other times. They came from
80.184.187.66
80.184.187.63
80.184.116.232
213.80.149.228
Is there anyway to tell who this is?
Yes
http://ws.arin.net/cgi-bin/whois.pl
http://www.ripe.net/db/whois/whois.html
http://www.apnic.net/apnic-bin/whois.pl
--
David C. Rankin, J.D., P.E.
RANKIN * BERTIN, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankin-bertin.com
--
----- Original Message -----
From: "James Hatridge" <James.Hatridge@epost.de>
To: <suse-linux-e@suse.com>
Sent: Wednesday, September 15, 2004 10:44 AM
Subject: [SLE] Scanned, hacked, or what?
Hi all...
Last night I was on the 'net when I noticed odd traffic on my modem. My
system
started slowing down real bad. Even after I got off the net my system was
slow. I had to reboot to get it back to normal. Looking thru my logs I found
this on my apache2 access_log:
80.184.187.66 - - [14/Sep/2004:21:00:21 +0200]
"SEARCH /\x90\x02\xb1\x02\xb1\x02\x
b1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1
\x02\xb1\x02\xb1\x02\ and so on
This covered about 10 pages or so. Looking thru the log I found the same
thing
three other times. They came from
80.184.187.66
80.184.187.63
80.184.116.232
213.80.149.228
Is there anyway to tell who this is? Also, and the main question, should I
worry about this? If so, what can I do about it? Other than slowing down my
system I can't find any problem with it. BTW, I'm using a standard install
of
SuSE 9.1 with apache2 running I've not changed anything.
Thanks,
JIM
--
Jim Hatridge
Linux User #88484
------------------------------------------------------
WartHog Bulletin
Info about new German Stamps
http://www.fuzzybunnymilitia.org/~hatridge/bulletin
Viel Feind -- Viel Ehr'
Anti-US Propaganda stamp collection
http://www.fuzzybunnymilitia.org/~hatridge/collection
--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
- Previous message: stephen: "Re: [SLE] LVM partitions not getting mounted"
- In reply to: James Hatridge: "[SLE] Scanned, hacked, or what?"
- Next in thread: Carlos E. R.: "Re: [SLE] Scanned, hacked, or what?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
