February 20, 2013

knock knock

I always find this kind of thing amusing:

http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/user/register 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/sign_up.html 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup/ 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/index.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/index.php?option=com_registration&task=register -> /cd_log_entries/index.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/ 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/index.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/registration_rules.asp?FID=0 -> /cd_log_entries/registration_rules.asp 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/register.php -> /cd_log_entries/register.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/register.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/profile.php?mode=register -> /cd_log_entries/profile.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/ucp.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/register.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/account/register.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/index.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/join.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/join_form.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/index.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/register/ 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/signup.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/join.php 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/blogs/load/recent 117.26.201.164 0pct.
http://www.denbeste.nu/cd_log_entries/ -> /cd_log_entries/member/join.php 117.26.201.164 0pct.

It's China.

Posted by: Steven Den Beste in Site Stuff at 06:57 AM | Comments (4) | Add Comment
Post contains 152 words, total size 3 kb.

1 Persistent little buggers, ain't they?

Posted by: CPT. Charles at February 20, 2013 07:29 AM (1GunI)

2 Sometimes these kinds of probes go on for hundreds of entries.

Posted by: Steven Den Beste at February 20, 2013 09:44 AM (+rSRq)

3 Since we're talking about Chicom hackers... here's a classic D'OH! moment.

(Pride goeth before destruction, and an haughty spirit before a fall.)

Posted by: CPT. Charles at February 20, 2013 01:24 PM (1GunI)

4 Before my wireless Modem was changed from WiMax to 4G, anything on my network could have been open.  Probes took up a lot of my bandwidth.  FTP was the only way to get stuff from my Mac to my PC.  Watching them dictionary attack the FTP server was kind of amusing.  They assumed I was on a PC, so they concentrated all their attempts on the default account "Admin".  I don't even have an account named Admin on my pc.

It was so tempting to try to set up some kind of honey pot, but I didn't really want to put in the effort.  But some kind of trojan disguised as a passwd file... would be delicious revenge.

And yeah, it was China.

Posted by: Mauser at February 21, 2013 12:46 AM (cZPoz)

Hide Comments | Add Comment

Enclose all spoilers in spoiler tags:
      [spoiler]your spoiler here[/spoiler]
Spoilers which are not properly tagged will be ruthlessly deleted on sight.
Also, I hate unsolicited suggestions and advice. (Even when you think you're being funny.)

At Chizumatic, we take pride in being incomplete, incorrect, inconsistent, and unfair. We do all of them deliberately.

How to put links in your comment

Comments are disabled. Post is locked.
9kb generated in CPU 0.006, elapsed 0.0193 seconds.
21 queries taking 0.0147 seconds, 21 records returned.
Powered by Minx 1.1.6c-pink.