Re: VNC and Script Kiddies

Article View: austin.internet

Article #238

#238

From: Doug McLaren
Date: Thu, 15 Jul 2010 19:44

25 lines
1816 bytes

On 2010-07-05, Sqwertz <swertz@cluemail.compost> wrote:

| In the last 5 hours I've been contacted twice by something
| emulating a VNC client.  How do those kiddie scripts work?  If no
| answer in 30 seconds, would they still be hanging on listening for
| an answer, or would they move on?

It would depend on the scanner they're using.

| If they do get to the password prompt, what are the chances they
| could get past that?

Very small.  They're probably looking for servers that require no
password and return immediately.

| And does having a FreeDNS chickenkiller.com
| subdomain increase the chances of kiddie scripts knocking on my
| door, or do those just generally go by IP address?

Probably by IP address.

-- 
Doug McLaren, dougmc@frenzied.us
In theory, there is no difference between theory and practice.  In practice,
there is.

Technical Details

Message-ID: <slrni3up8p.i19.dougmc+usenet@frenzied.us>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!news-in-01.newsfeed.easynews.com!easynews!core-easynews-01!easynews.com!en-nntp-06.dc1.easynews.com.POSTED!not-for-mail

References: <16dke3ssj4gfk.dlg@sqwertz.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113866,96580ba6f23b0cd4
X-Google-NewGroupId: yes
X-Google-Attributes: gidc2deb35511,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!news-in-01.newsfeed.easynews.com!easynews!core-easynews-01!easynews.com!en-nntp-06.dc1.easynews.com.POSTED!not-for-mail
Newsgroups: austin.internet
From: Doug McLaren <dougmc+usenet@frenzied.us>
Subject: Re: VNC and Script Kiddies
References: <16dke3ssj4gfk.dlg@sqwertz.com>
Organization: Frenzied Enterprises
User-Agent: slrn/0.9.9p1 (Linux)
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <slrni3up8p.i19.dougmc+usenet@frenzied.us>
Lines: 25
X-Complaints-To: abuse@easynews.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Thu, 15 Jul 2010 19:44:25 GMT

Reply to Parent Message