zombie bot net out of europe scanning for open ports to hack. if you are running a win32 host and have the ftp service running then your host is likley to come under increased probes looking for ftp so they can get in and establish control. if you have any ftp servers running that allow anonymous access then you are probably already hacked. keep an eye out in your ftp logs for strange looking strings with a lot of plus signs. if you find an odd set of directories that you can't delete then you are hacked and get to format your drive.
[DinoBot]Sidmind wrote:
Alfred, can you explain why when I turn on net_showudp that a wide range of ports that are obviosly NOT serverbrowsers are turning up. Remember I did these tests on a server that had a brand new IP address never used for anything. so no one would have this in there programs. Of course ASE/gamespy would eventually pick it up from the Master Server, but it doesn't explain all the Home PC's I had a steady stream of udp traffic, below is only about 1 seconds worth of copy/paste , and according to nslookup these are all homepc's
UDP <- 64.81.227.179:63392: sz=25 OOB 'T' UDP -> 64.81.227.179:63392: sz=88 OOB 'I' UDP <- 217.93.234.62:1960: sz=25 OOB 'T' UDP -> 217.93.234.62:1960: sz=88 OOB 'I' UDP <- 67.84.228.213:1699: sz=25 OOB 'T' UDP -> 67.84.228.213:1699: sz=88 OOB 'I' UDP <- 68.44.15.163:1691: sz=25 OOB 'T' UDP -> 68.44.15.163:1691: sz=88 OOB 'I' UDP <- 68.221.252.204:50576: sz=25 OOB 'T UDP -> 68.221.252.204:50576: sz=88 OOB 'I UDP <- 67.8.144.155:8128: sz=25 OOB 'T' UDP -> 67.8.144.155:8128: sz=88 OOB 'I' UDP <- 24.3.197.232:1123: sz=25 OOB 'T' UDP -> 24.3.197.232:1123: sz=88 OOB 'I' UDP <- 68.60.187.173:2936: sz=25 OOB 'T'
--- Alfred Reynolds <[EMAIL PROTECTED]> wrote:
That message is printed when a server query is received by the server with the incorrect (or missing) challenge value in the packet. Right now this means clients (i.e running older serverbrowser tools) querying your server.
- Alfred
__________________________________ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail
_______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
_______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
