Apache worma si smeni controlniq port w nedelq ot udp/2002 na udp/4156. Apache worm-a gradi peer-to-peer mreja prez koqto ot wsqka zarazena mashina mojesh da komandwash wsqka druga zarazena. Prichinata trafika da e adresiran do twoqta mashina e che poradi nqkakwa prichina drugite mashina sa q narochili che e zarazena sys syshtiq worm i se opitwat da izgratqt p-t-p wryzka s neq za da stane tq chast ot mrejata.
towa razbira se sa predpolojeniq bazirani na nqkolko postinga w nqkolko publichni listi. Boyan Krosnov, CCIE#8701 http://boyan.ludost.net/ Just another techie speaking for himself -----Original Message----- From: Nick Bashev [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 2:06 AM To: [EMAIL PROTECTED] Subject: lug-bg: udp port 4156 Zdrasti grupa, edin barz vapros. Ot tazi sutrin 9/22 imam ataka na udp port 4156. Osven che me zasipva niakoi s paketi sredna dalzina 70 bytes gledam che pisha gi puska sys random src address-i. Gledah v neta taka i ne namerih neshto poznato za tozi port. Vsichki services mi bachkat nema problem. POchnah da gi dropia tia paketi che da ne vryshtam icmp-ta kato lud po celia internet. Atakata e s okolo 10-15 kb/s ne mi prechi trafika ama me iadosva che ne moga da razbera kakvo tochno iskat da mi atakauvat ============================================================================ A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html ============================================================================
