Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
These are various exploits (though their exact names I don't know). I think these are iis or other server exploits. I get these a lot and they seem to have no effect at all. You'll have to get used to log entries like these, becuase a lot of worms like nimba and code red are still scanning the internet, and generate log entries that look like this.
That is what I thought, but what about the 'SEARCH' query. This is not specified in the http 1.0 or 1.1 RFC's. Is this some kind of stupid Microsoft thing?
I have decided to send a polite but informative email to the apropriate email address informing the ISP about one of their customers attempting to attack me.
I know that one person cant make a difference, but if everyone wrote one email a day reguarding these attacks, ill bet that the hackers would eventually loose their ISP accounts due to repeated complaints.
granted, its not prison time, but better than just sitting back and waiting till they download that brand new apache exploit that all their hacker buddies are talking about.
Well, the problem with that is that the attack probably is coming from somebody with the intent to do an attack. Chances are it's just some kind of Windows worm that somebody on a cbale modem got. You really can't expect isps to shut people down just because they're too stupid to keep their machines secure.
quote: You really can't expect isps to shut people down just because they're too stupid to keep their machines secure.
Uhhh....yes, you most certainly can. I am an abuse administrator at an ISP in Alaska, and that is *exactly* what I do when I run across users that can't/won't secure their computers. In general, however, after contacting the user a few times to advise them that they have a problem and that they need to fix it or risk losing their accounts--and giving a few helpful pointers to get them on their way--my users eventually either get their computer locked down or replace it with a new one. While some of them will eventually get the new computer infected, etc. a number of them learn a bit about basic security (firewall, anti-virus, anti-spyware, patching the OS, etc.), and cause no more problems.
I *really* wish ISP's could/would communicate better with PC repair shops, however. I can't tell you how many customers I have contacted where there has absolutely, positively been a problem on the customer's machine (typically, malware installed by a trojan for relaying UCE elsewhere), but the PC shop ran a quick A/V, called the computer clean, charged the customer $150 and told them they found nothing...at which point the customer calls in screaming at me because they just spent $150 on a computer that "had nothing wrong with it." And then they get *REALLY* upset when I suspend them again because they are still relaying spam... (Hint for PC repair shop employees: nmap and ethereal are your friends!)
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.