Nat! bio photo

Nat!

Senior Mull.

Twitter RSS

Github

Friendly Inquiry

I put up a little Mac OS X box on the internet as a server. Got a DNS entry at my company. So who knows about this machine ? Me and the DNS and some really communicative people, who scan apparently the DNS for new machines and immediately look for forum software, to find new partners to chat with :) :

195.226.243.20 - - [16/Feb/2005:14:27:40 +0100] "POST /_vti_bin/_vti_aut/fp30reg.dll HTTP/1.1" 404 308
66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET /forum/ HTTP/1.1" 404 285
66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET /phpBB/ HTTP/1.1" 404 285
66.103.149.66 - - [16/Feb/2005:20:52:12 +0100] "GET / HTTP/1.1" 200 125
66.103.149.66 - - [16/Feb/2005:20:52:13 +0100] "GET /forums/ HTTP/1.1" 404 286
66.103.149.66 - - [16/Feb/2005:20:52:14 +0100] "GET /phpbb/ HTTP/1.1" 404 285
66.103.149.66 - - [16/Feb/2005:20:52:15 +0100] "GET /board/ HTTP/1.1" 404 285
66.103.149.66 - - [16/Feb/2005:20:52:16 +0100] "GET /boards/ HTTP/1.1" 404 286
66.103.149.66 - - [16/Feb/2005:20:52:16 +0100] "GET /phpBB2/ HTTP/1.1" 404 286
66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /msgboard/ HTTP/1.1" 404 288
66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /foros/ HTTP/1.1" 404 285
66.103.149.66 - - [16/Feb/2005:20:52:19 +0100] "GET /portal/ HTTP/1.1" 404 286
195.226.243.43 - - [16/Feb/2005:23:52:13 +0100] "SEARCH /\x90\xc9\xc9\xc9\xc9\

It took them 37 hours to find the box. It is behind a firewall but a portscan should have revealed it earlier. That the first break in attempt came so late is fairly disappointing, but I suspect most attempts are still looking for open Windows ports.