RE: lug-bg: udp port 4156

[bkrosnov@xxxxxxxx (Boyan Krosnov)]

Apache worma si smeni controlniq port w nedelq ot udp/2002 na udp/4156.
Apache worm-a gradi peer-to-peer mreja prez koqto ot wsqka zarazena
mashina mojesh da komandwash wsqka druga zarazena. Prichinata trafika da
e adresiran do twoqta mashina e che poradi nqkakwa prichina drugite
mashina sa q narochili che e zarazena sys syshtiq worm i se opitwat da
izgratqt p-t-p wryzka s neq za da stane tq chast ot mrejata.

towa razbira se sa predpolojeniq bazirani na nqkolko postinga w nqkolko
publichni listi.

Boyan Krosnov, CCIE#8701
http://boyan.ludost.net/
Just another techie speaking for himself

-----Original Message-----
From: Nick Bashev [mailto:nick@xxxxxxxxxx] 
Sent: Monday, September 23, 2002 2:06 AM
To: lug-bg@xxxxxxxxxxxxxxxxxx
Subject: lug-bg: udp port 4156

Zdrasti grupa,
edin barz vapros. Ot tazi sutrin 9/22 imam ataka na udp port 4156. Osven
che me zasipva niakoi s paketi sredna dalzina 70 bytes gledam che pisha
gi puska sys random src address-i. Gledah v neta taka i ne namerih
neshto poznato za tozi port. Vsichki services mi bachkat nema problem.
POchnah da gi dropia tia paketi che da ne vryshtam icmp-ta kato lud po
celia internet. Atakata e s okolo 10-15 kb/s ne mi prechi trafika ama me
iadosva che ne moga da razbera kakvo tochno iskat da mi atakauvat
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================