Re: Wat is dit eigenlijk

Article View: be.comp.security

Article #306

#306

From: Filbert
Date: Mon, 15 May 2006 17:49

26 lines
1903 bytes

Cyrano wrote:

> In article <mn.75417d654f933e89.50274@scarlet.be>,
>  Rudi.$ <andromeda@scarlet.be> wrote:
> 
>> Goede avond
>> 
>> mijn router geeft veel van deze meldingen in de logfile, wat kan ik
>> daar uit afleiden?
>> 
>> een vb:
>> Source:172.159.21.114,3504 Destination:81.11.205.169,6346 - [DOS] Sun,
>> 2006-05-14 21:02:06 - TCP Packet - Source:81.11.190.165,4664
>> Destination:81.11.205.169,135 - [DOS] Sun, 2006-05-14 21:02:09 - TCP
>> Packet -
> 
> Zonder de inhoud van dat pakket te zien, lijkt het een DOS-attack op
> Sun, veel kans een oud exploit met een misvormd pakket...
> 

'Sun" is in deze zondag imho


-- 
"Life becomes much easier once you accept you will fail."
  - http://www.modsecurity.org/blog/archives/2005/03/

Technical Details

Message-ID: <9b3ag.427395$pS4.11587709@phobos.telenet-ops.be>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsfeed.cw.net!cw.net!news-FFM2.ecrc.de!hoboe2bl2.telenet-ops.be!nntp.telenet.be!kwabbernoot.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

References: <mn.75417d654f933e89.50274@scarlet.be> <cyrano.mac-0A013B.23434614052006@europe.isp.giganews.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,6bcd3dac2e2cb375
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsfeed.cw.net!cw.net!news-FFM2.ecrc.de!hoboe2bl2.telenet-ops.be!nntp.telenet.be!kwabbernoot.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
From: Filbert <+++ATH0aaadmin+++ATH0@gmail.com>
Subject: Re: Wat is dit eigenlijk
Newsgroups: be.comp.security
Reply-To: +++ATH0aaadmin+++ATH0@gmail.com
References: <mn.75417d654f933e89.50274@scarlet.be> <cyrano.mac-0A013B.23434614052006@europe.isp.giganews.com>
Lines: 26
Organization: noyb
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Message-ID: <9b3ag.427395$pS4.11587709@phobos.telenet-ops.be>
Date: Mon, 15 May 2006 17:49:57 GMT
NNTP-Posting-Host: 84.193.68.33
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1147715397 84.193.68.33 (Mon, 15 May 2006 19:49:57 MEST)
NNTP-Posting-Date: Mon, 15 May 2006 19:49:57 MEST

Reply to Parent Message