Throw it to the wolves

[Tyrn]

Funny how quickly people try to abuse a service that others are willing to provide. I hope you enjoy the fame while it lasts. It also appears that you're known at DShield (see this report).

Log snippet from Cerberus Server:

Fri Dec 14 09:53:26 2001 5 Connection request accepted from 80.11.174.29

Fri Dec 14 09:53:29 2001 5 USER anonymous

Fri Dec 14 09:53:30 2001 5 CWD /pub/

Fri Dec 14 09:53:30 2001 5 CWD /public/

Fri Dec 14 09:53:33 2001 5 CWD /pub/incoming/

Fri Dec 14 09:53:38 2001 5 CWD /incoming/

Fri Dec 14 09:53:38 2001 5 CWD /_vti_pvt/

Fri Dec 14 09:53:38 2001 5 CWD /

Fri Dec 14 09:53:39 2001 5 MKD 011214175412p

Fri Dec 14 09:53:39 2001 5 CWD /upload/

Fri Dec 14 09:53:39 2001 5 The connection was closed by the remote socket.

Fri Dec 14 09:53:39 2001 5 Connection terminated.

[Guest]

Neat links. Now what are you talking about?

That hacker guy in the reports trying to get into your system?

[ 12-14-2001: Message edited by: Tac ]

[Tyrn]

quote:

---

Originally posted by Tac:

Neat links. Now what are you talking about?

That hacker guy in the reports trying to get into your system?

---

Tried and failed badly. It's a poor attempt at seeing if Cerberus (my ftp server) is vulnerable so files (likely filez) can be stored on it. As I haven't had even a single port probe on that machine for over eight months now, I find it very suspicious that I see such activity less than 24 hours after a link to my server is posted on a closed forum. Leads me to believe that the individual is one of us and it irritates the tar right out of me.

[ 12-14-2001: Message edited by: Tyrn ]

[Guest]

[Soback]

Well, acually the forum has been opened to the public.

What I mean is, you need to be registered to post, but you don't need to be registered to browse.

[ 12-15-2001: Message edited by: Soback ]

[Supreme Cmdr]

quote:

---

Originally posted by Tyrn:

Leads me to believe that the individual is one of us and it irritates the tar right out of me.

---

uhm, probably - but IP addresses are not displayed in the forum, so how would he gain access to it?

[Tyrn]

quote:

---

Originally posted by Supreme Cmdr:

uhm, probably - but IP addresses are not displayed in the forum, so how would he gain access to it?

---

That just my point. That server's been running for well over three years and every so often I get a rash of attempts on it but that's about the same time every other server starts showing a bit of red on the radar due to random port probes. Been probe free for nearly 8 months. The link to my server is posted in the tech forums (which I was under the impression are closed to public viewing?) for people to download the patch and within 24 hours someone with too much time on their hands takes a shot at the server.

I'm not too worried about it because I run a tight ship and the last time anyone tried hijacking/cracking my network the individual got no further than the entertainment above did. Unfortunately for him, he didn't stop. As a result, he lost his job, his reputation and earned himself a place on certain "key an eye on this one" lists. Last I heard, he's having a hard time finding stable work because his new reputation precedes him.

My point is, I trust the people here (and I still do) and it's out of my love for the game and my desire to share it that I and others are willing to host the patches. It saddens me to know that there may be at least one true "raider" among us.

Oh well, there's no point in letting the true low lifes make us stop trusting each other, so on with life!