Subj : bbs shut down again by re To : DieselMan From : Angus Mcleod Date : Mon Jun 27 2005 10:07 am Re: bbs shut down again by re By: DieselMan to All on Mon Jun 27 2005 03:52:00 > > I was just sitting here at the desk and watched it happen again. What is the > cause of this? Any ideas how they are doing it? Or is it a bug in the > webserver? > > I will post the http log next and my system log after that. Just some observations: > 6/27 02:02:47 web 0018 HTTP connection accepted from: 67.166.180.23 port 49 > 6/27 02:39:40 web 0018 HTTP connection accepted from: 69.152.239.228 port 3 Any reason to believe these are the same guy? > 6/27 02:39:41 web 0022 !UNKNOWN USER: `‚z+ ‚n0‚j¡‚ > b‚ Password: The ‚ is a comma, so does ',^Pz^F^F+^F ,^Pn0,^Pj$b^C,^D' mean anything to anyone? > [Threads: 12 Sockets: 14 Clients: 0 Served: 69] (?=Help): x Call for a menu > [Threads: 12 Sockets: 14 Clients: 0 Served: 69] (?=Help): t Terminate... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): r Rerun... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): x Menu... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): t Terminate... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): r Rerun... Someone playing around, I'd say. Probably doesn't know what he's encountered. > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): ^[ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): [ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): A ANSI Sequence: ESC [ A == Cursor-UP... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): ^[ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): [ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): A Cursor-UP... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): ^[ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): [ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): A Cursor-UP... > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): ^[ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): [ > [Threads: 2 Sockets: 0 Clients: 0 Served: 69] (?=Help): A Cursor-UP... --- þ Synchronet þ Linus is a regular at The ANJO BBS. No, Linus Brathwaite! .