Friendly Inquiry
I put up a little Mac OS X box on the internet as a server. Got a DNS entry at my company. So who knows about this machine ? Me and the DNS and some really communicative people, who scan apparently the DNS for new machines and immediately look for forum software, to find new partners to chat with :) :
195.226.243.20 - - [16/Feb/2005:14:27:40 +0100] "POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 404 308 66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET /forum/ HTTP/1.1" 404 285 66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET /phpBB/ HTTP/1.1" 404 285 66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET / HTTP/1.1" 200 125 66.103.149.66 - - [16/Feb/2005:20:52:13 +0100] "GET /forums/ HTTP/1.1" 404 286 66.103.149.66 - - [16/Feb/2005:20:52:14 +0100] "GET /phpbb/ HTTP/1.1" 404 285 66.103.149.66 - - [16/Feb/2005:20:52:15 +0100] "GET /board/ HTTP/1.1" 404 285 66.103.149.66 - - [16/Feb/2005:20:52:16 +0100] "GET /boards/ HTTP/1.1" 404 286 66.103.149.66 - - [16/Feb/2005:20:52:16 +0100] "GET /phpBB2/ HTTP/1.1" 404 286 66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /msgboard/ HTTP/1.1" 404 288 66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /foros/ HTTP/1.1" 404 285 66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /portal/ HTTP/1.1" 404 286 195.226.243.43 - - [16/Feb/2005:23:52:13 +0100] "SEARCH /\x90\xc9\xc9\xc9\xc9\It took them 37 hours to find the box. It is behind a firewall but a portscan should have revealed it earlier. That the first break in attempt came so late is fairly disappointing, but I suspect most attempts are still looking for open Windows ports.
