[TAG] [lgang] Paypal spam

[David Richardson]

On Fri, Feb 16, 2007 at 09:46:52AM -0800, Benjamin A. Okopnik wrote:
> On Fri, Feb 16, 2007 at 09:47:43AM -0500, David Richardson wrote:
> > On Thu, Feb 15, 2007 at 08:51:48PM -0800, Benjamin A. Okopnik wrote:
> > > 
> > > ``
[snip]
> > > changed:     20040213
> > > ''
> > > 
> > > Ah, a default install of RHEL that got cracked. I'm feeling a bit too
> > > lazy to ping the admin myself... it would be like sweeping back the
> > > tide.
> >  
> > Ben:
> > 
> > This makes me feel massively stupid, but I must ask:  How do you get
> > from the above info to "default install of RHEL that got cracked"
> 
> Sorry, Dave - didn't mean to make you feel stupid. There's nothing in
> the above to indicate it, but if you go to the IP/URL (i.e.,
> http://200.43.80.116), it shows the default RHEL "Welcome" banner.
> [clickety-click] Um, it used to, that is. Perhaps the owner has caught
> on that he was being used as a mule.

D'oh!  And everything is so obvious in the rear-view mirror.

Actually, I have never gotten the RHEL "Welcome" banner, although I
seen all too many default windoze IIS installations over the years.
Between the lower number of RHEL installations and the higher clue level
of Linux user and admin types, I don't generally expect that sort of
thing on the open net, hence my failure to look for the (now) obvious.

Perhaps their ISP got wind of their output and did something?
Never happens...

-- 
David               \
Richardson           \   Imagine whirled peas.....
dsrich at ieee.org       \
The above is my own opinion - nobody else wants it!