ru.unix.bsd

 
 - RU.UNIX.BSD ------------------------------------------------------------------
 From : Shtirlitz                            2:5020/400     06 May 2002  12:51:57
 To : All
 Subject : Kazimas, от куда?
 -------------------------------------------------------------------------------- 
 

 Hello!
 Сегодня получил по почте лог. Привожу ниже (195.96.64.250 - моя машина).
 Судя по логу 195.96.64.250 лезет на 195.96.68.130. В инете нашел, что
 Kazimas - IRC червь. Hо откуда он может взяться на FreeBSD машине?
 Кде копать?
 
 05/06/02 09:52:58 06.May.2002 05:52:58
 GMT;195.96.64.250;4145;195.96.68.130;113;TCP;Invisible Identd Deamon,
 Kazimas  The Firewall has blocked a connection attempt made to
 195.96.68.130:113 from 195.96.64.250:4145, protocol: TCP. Known virus to
 attack on this port: Invisible Identd Deamon, Kazimas
 05/06/02 09:52:58 Authentication Authentication failed - user Guest on
 192.168.70.62 requested NAT: UDP 192.168.70.62:137 <-> 195.96.68.130:137
 05/06/02 09:52:59 Auto Update Visit http://www.wingate.com/autoupdate for
 information about the latest version of WinGate.
 05/06/02 09:53:00 Authentication Authentication failed - user Guest on
 192.168.70.62 requested NAT: UDP 192.168.70.62:137 <-> 195.96.68.130:137
 05/06/02 09:53:01 06.May.2002 05:53:01
 GMT;195.96.64.250;4145;195.96.68.130;113;TCP;Invisible Identd Deamon,
 Kazimas  The Firewall has blocked a connection attempt made to
 195.96.68.130:113 from 195.96.64.250:4145, protocol: TCP. Known virus to
 attack on this port: Invisible Identd Deamon, Kazimas
 --- ifmail v.2.15dev5
  * Origin: Gamma NNTP server Moscow Russia (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор 

Тема:    Автор:    Дата:    Kazimas, от куда?   Shtirlitz   06 May 2002 12:51:57   Re: Kazimas, от куда?   Spartak Radchenko   06 May 2002 14:58:01