[H-GEN] News posting.

John Boggon John.B at uq.net.au
Sun May 24 04:00:40 EDT 1998


-----Original Message-----
From: Martin Pool <mbp at meesha.humbug.org.au>
To: Humbug General List <general at humbug.org.au>
Date: Sunday, 24 May 1998 04:11:pm
Subject: Re: [H-GEN] News posting.


>
>>There's a whole bunch of auto responders out there that send a message
>>to you when you post to a *.test newsgroup, that's probably what you are
>>seeing.  There is a way to prevent this from happening by putting a
>>specific word into the subject field, but I can't remember what the word
>>is.
>
>ignore.
>


A part of my original post is below


          I post one test message to two newsgroups, uq.test and alt.test
and within 24 hours my syslog starts filling with these sorts of messages.

May  4 21:09:46 dragon leafnode[1194]: refused connect from bi4pc.sds.no
May  4 22:19:30 dragon leafnode[1245]: refused connect from
dial559.skypoint.net
May  4 22:42:12 dragon leafnode[1267]: refused connect from
imk45.mb.Uni-Magdeburg.DE
May  4 23:56:34 dragon leafnode[1451]: refused connect from gw.nhnet.org
May  5 00:00:19 dragon leafnode[1464]: refused connect from
rhombus.mdm.mke.execpc.com
May  5 17:09:02 dragon leafnode[931]: refused connect from
siepc3.grumed.fu-berlin.de
May  5 18:29:01 dragon leafnode[1047]: refused connect from
ip106.jeffnet.org
May  5 20:18:42 dragon leafnode[1173]: refused connect from
mortens.virtek.no
May  5 21:47:37 dragon leafnode[1534]: refused connect from
boromir.matpr.kth.se
May  5 23:30:09 dragon leafnode[1731]: refused connect from
2.p1.usr02.MIA.Icanect.Net
May  5 23:41:24 dragon leafnode[1745]: refused connect from
207-172-197-7.s7.as1.smf.erols.com


As you can see, ONE test message to alt.test and within hours my syslog had
started to fill up with messages like these. This went on for about 2 weeks.
Some of the attempted connects had the word 'dial' in the hostname
somewhere. I even had one attempted telnet login. Some of the attempts might
have come from autoresponders but I think the majority of them originated
from people poking around looking for unguarded servers.

John



----------------------- HUMBUG General List --------------------------------
echo "unsubscribe general" | mail majordomo at humbug.org.au # To Unsubscribe



More information about the General mailing list