Worms, not crackers.

IWETHEY v. 0.3.0 | TODO

1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User

Welcome to IWETHEY!

Post #39,469

by static

5/22/02 1:45:28 AM

Worms, not crackers.

I see them, too. One of them is Nimda, the other is Code Red. Most of them seem to come from the email variant because if you try to connect back, you don't find a server.

Crackers are the ones who show up in your iptables logs trying all your IP addresses. You may not see that, but I have a small address block and see them trying FTP and other things on all of IP addresses.

Wade.

"All around me are nothing but fakes
Come with me on the biggest fake of all!"

Post #39,485

by Steven A S

5/22/02 8:44:42 AM

So the problem I'm seeing

is due more to inattentive server administrators (probably home users with little knowledge of the threat). OK, I can see that. As far as finding port probes, any ports except 80 (or open connections from my accessing the internet) are being dropped at my router before they can even get to my iptables, so I don't see alot of that info.

~~~)-Steven----

"I want you to remember that no bastard ever won a war by dying for his country.
He won it by making the other poor dumb bastard die for his country..."

General George S. Patton

Poor quality of Crackers these days - (Steven A S) - (5) - May 21, 2002, 11:34:15 AM EDT

The GETs are most likely a worm, not a human cracker. - (tseliot) - May 21, 2002, 11:58:12 AM EDT

Some responses - (drewk) - (1) - May 21, 2002, 05:52:52 PM EDT

OT: l33t sp33k update. - (inthane-chan) - May 29, 2002, 09:15:22 PM EDT

Worms, not crackers. - (static) - (1) - May 22, 2002, 01:45:28 AM EDT

So the problem I'm seeing - (Steven A S) - May 22, 2002, 08:44:42 AM EDT

iwethey.org

Department of Redundancy Department
38 ms