WCM Forum

WCM Forum (http://www.wcm.at/forum/index.php)
-   Internet (http://www.wcm.at/forum/forumdisplay.php?f=8)
-   -   MS-SQL Worm propagation attempt (http://www.wcm.at/forum/showthread.php?t=104667)

running_wild 06.08.2003 02:10

MS-SQL Worm propagation attempt
 
Ich habe am Sonntag eine Smoothwall (www.smoothwall.org) auf einem alten Rechner aufgesetzt und für mein Alcatel Speed Touch USB konfiguriert. Jetzt schaue ich mir die ids logs an und was sehe ich da? (Siehe Anhang)

Whois:

61.232.206.26 ()

BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2001 William E. Weinman
Request: 61.232.206.26
connecting to whois.arin.net [192.149.252.43:43] ...
connecting to WHOIS.APNIC.NET [202.12.29.13:43] ...
% [whois.apnic.net node-2]
% How to use this server http://www.apnic.net/db/
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 61.232.0.0 - 61.237.255.255
netname: CRTC
country: CN
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
admin-c: LQ112-AP
tech-c: LM273-AP
status: ALLOCATED PORTABLE
changed: ipas@cnnic.net.cn 20030121
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: LV QIANG
nic-hdl: LQ112-AP
e-mail: crnet_mgr@crc.net.cn
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51890499
fax-no: +86-10-51890674
country: CN
changed: ipas@cnnic.net.cn 20030729
mnt-by: MAINT-CNNIC-AP
source: APNIC

person: liu min
nic-hdl: LM273-AP
e-mail: crnet_tec@crc.net.cn
address: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
phone: +86-10-51848796
fax-no: +86-10-51842426
country: CN
changed: ipas@cnnic.net.cn 20030729
mnt-by: MAINT-CNNIC-AP
source: APNIC



Da hat jemand den Security Patch verpasst!?


Alle Zeitangaben in WEZ +2. Es ist jetzt 01:00 Uhr.

Powered by vBulletin® Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
© 2009 FSL Verlag