Re: lug-bg: udp port 4156

[nick@xxxxxxxxxx (Nick Bashev)]

Mersi tova me nasochi dostatachno. Okaza se che v /tmp imam bugtraq.c i
razni podobni na nego. Interesnoto e che ne namerih programa koito kato gi
testva tezi file-ta da mi kaze che te sa virusi. Vse oshte se macha da
razbera kakvo stava prodalzavam da tarsia ako niakoi nameri neshto interesno
neka da drasne 2-3 reda.

POzdravi
nick
----- Original Message -----
From: "Boyan Krosnov" <bkrosnov@xxxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Monday, September 23, 2002 3:53 AM
Subject: RE: lug-bg: udp port 4156

> Apache worma si smeni controlniq port w nedelq ot udp/2002 na udp/4156.
> Apache worm-a gradi peer-to-peer mreja prez koqto ot wsqka zarazena
> mashina mojesh da komandwash wsqka druga zarazena. Prichinata trafika da
> e adresiran do twoqta mashina e che poradi nqkakwa prichina drugite
> mashina sa q narochili che e zarazena sys syshtiq worm i se opitwat da
> izgratqt p-t-p wryzka s neq za da stane tq chast ot mrejata.
>
> towa razbira se sa predpolojeniq bazirani na nqkolko postinga w nqkolko
> publichni listi.
>
> Boyan Krosnov, CCIE#8701
> http://boyan.ludost.net/
> Just another techie speaking for himself
>
> -----Original Message-----
> From: Nick Bashev [mailto:nick@xxxxxxxxxx]
> Sent: Monday, September 23, 2002 2:06 AM
> To: lug-bg@xxxxxxxxxxxxxxxxxx
> Subject: lug-bg: udp port 4156
>
>
> Zdrasti grupa,
> edin barz vapros. Ot tazi sutrin 9/22 imam ataka na udp port 4156. Osven
> che me zasipva niakoi s paketi sredna dalzina 70 bytes gledam che pisha
> gi puska sys random src address-i. Gledah v neta taka i ne namerih
> neshto poznato za tozi port. Vsichki services mi bachkat nema problem.
> POchnah da gi dropia tia paketi che da ne vryshtam icmp-ta kato lud po
> celia internet. Atakata e s okolo 10-15 kb/s ne mi prechi trafika ama me
> iadosva che ne moga da razbera kakvo tochno iskat da mi atakauvat
>
============================================================================
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
Zagora
> To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
>
============================================================================

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================