Am I being hacked?

[Tim Winders]

On Sat, 25 Apr 1998, Matthew Geier wrote:

> >   3) Am I being hacked?
> > 	by Tim Winders <twinders at SPC.cc.tx.us>
> 
> > I am seeing a BUNCH of these type of messages in my log.nmb file.  the IP
> > address varies, with only 2 different ones showing up.
> 
>  Only 2? :-)

Uh, yeah, fortunately!
 
> 
> > process_node_status_request: status request for name *<00> from IP 206.139.7.109
> >  on subnet REMOTE_BROADCAST_SUBNET - name not found.
>  
>  I get these all the time, from a wide varity of source addresses,
> some may be our own people (with laptops) on the move, but I imagine
> most are 'hackers' looking for NT/Win95 box with a writable share.

Sheesh, what a bunch of punks.
 
>  My site get probed all the time. Just the last week some one probed
> every IP address looking for IMAP servers.

Yeah, I got that too.  Some site in Taiwan...

=== Tim

---------------------------------------------------------------------
|  Tim Winders, CNE, MCP         |  Email:  TWinders at SPC.cc.tx.us   |
|  Network Administrator         |  Phone:  806-894-9611 x 2369     |
|  South Plains College          |  Fax:    806-897-4711            |
---------------------------------------------------------------------