My wife's tiny little site has been under attack

Post #10,824 by mhuber 9/28/01 3:25:03 PM Reply	My wife's tiny little site has been under attack I put up a new web site for my wife's costume shop a few days ago. Single page, I haven't publicized it except very casualy yet. [link\|http://www.kimscostumes.com\|www.kimscostumes.com] The "error 404" logs show over 900 attempts to access several key Windows files, mostly cmd.exe with several different sets of paths and parameters. The server isn't running Windows.
Post #10,837 by bepatient 9/28/01 5:34:13 PM Reply	Welcome to the land of the worms. That, my friend, is Nimda. And the attempts at default.ida = Code Red Fun...isn't it? You were born...and so you're free...so Happy Birthday! _{Laurie Anderson} [link\|mailto:bepatient@aol.com\|BePatient]
Post #10,845 by Ashton 9/28/01 6:47:08 PM Reply	Thanks: collecting hard #s like yours.. As I try to gently move my local 'project' (non-profit) folk off of W2K Server. But first I have to find a local LUG person capable of duplicating the rather simple functionality they require - and at least continue to serve 3 W-98 laptops (!) until desktop, improved Star Office can morph in at a quite later date. Even I am now appreciating the length of the detailed list of things which must work - ever to become Billy-free, with typ. office tasks :( The chief honcho is ex-management of his own company, but apparently less PHB-ish (re "what he Knows he doesn't know") - than many of the examples described here. He's beginning to get it: what lock-in, the license cops and "owning your own data" might mean.. {sigh} (At least they aren't running a website! and while IIS is currently 'inactive', I need next to utterly nuke all traces - dunno if an 'inactive task', in Billy's lexicon means: cannot be externally switched back on (?)) What a STUPID STUPID industry, all in all.. Ashton Admin (!!)
Post #11,091 by mhuber 10/1/01 11:26:04 AM Reply	So, you want hard numbers, eh? Here's an excerpt from the reports: [link\|http://mercury.spaceports.com/~nax/attacks.html\|[link\|http://mercury.spaceports.com/~nax/attacks.html\|http://mercury.spac...attacks.html]] Let me know when you are done with it, I don't intend to leave the page up forever. "You don't have to be right - just use bolded upper case" - annon.
Post #11,179 by Ashton 10/1/01 8:20:56 PM Reply	Gracias - saved page. This project is becoming a good lesson for me re how hard it is to present umm "significant" facts about today's tradeoffs - even to a pretty bright guy. He at least knows a few buzzwords, and is not religiously brainwashed re M$ (or anti). Now all I have to do, after the ISDN works, etc - is create all .doc for the system (installed choices, that is), from scratch. That or ~whatever will pass, for someone new, to ever make sense of it after a crash :[ (No way in hell you could 'cookbook' something like a W2K Server, I see.) Even the O'Reilly admin book has so much crap about AD! intermixed within every hint: learning Sanskrit would be easier and far more useful overall, at least to me. Guess I'll be wandering over there to look at logs, for some time. Damn; wouldn't do this for $100/hr. Unless starving and then.. I could - eat less) A Reluctant 'Admin'

Welcome to IWETHEY!