[Suns-at-Home] Odd httpd error entries - probe attempts?
Huge
huge@huge.org.uk
Sat, 6 Oct 2001 20:26:37 +0100 (BST)
> From: "Brian P. Costello" <costellob@asme.org>
[40 lines snipped]
> Obviously these are windows files so I am not too worried since my server
> is a SPARC 20 running Solaris but I can't help wondering why this is going on.
[195 lines snipped]
Some mindless script kiddy is attempting to hack your server by running
an exploit toolkit against it, not realising it is not a Windows IIS
machine - although it's actually easier just to run the toolkit than it
is to attempt to characterise the server(s) you're attacking.
In the Good Old Days, you could report these people to their ISPs and
they would be heaved off the Internet, never to return. These days, I
wouldn't bother wasting the electrons to report them. Like as not, nothing
will be done, and if they do lose their account, they'll be back on
another ISP in 20 minutes.
Regards,
Hugh.