🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.comp.networks
Article #347

Re: Gibe/Swen scannt aktiv newsgroups

#347
From: Martin Willisegger
Date: Sun, 21 Sep 2003 09:05
34 lines
2779 bytes
Hallo

Martin Willisegger schrieb:

> Sep 15 08:43:21 xxxxx nnrpd[30801]:
> 82-37-24-180.cable.ubr04.wolv.blueyonder.co.uk auth_err ckpasswd:
> user guest does not exist.
> Sep 15 16:37:38 xxxxx nnrpd[7247]: cc402396-a.sneek1.fr.home.nl
> auth_err ckpasswd: user guest does not exist.
> Sep 15 21:17:52 xxxxx nnrpd[31153]: cc402396-a.sneek1.fr.home.nl
> auth_err ckpasswd: user guest does not exist.
> Sep 15 23:09:03 xxxxx nnrpd[10697]: pd9e48685.dip.t-dialin.net
> auth_err ckpasswd: user guest does not exist.
> Sep 16 18:29:03 xxxxx nnrpd[28260]: cc402396-a.sneek1.fr.home.nl
> auth_err ckpasswd: user guest does not exist.
> Sep 17 02:21:23 xxxxx nnrpd[14744]: qn-213-73-241-251.quicknet.nl
> auth_err ckpasswd: user guest does not exist.
> Sep 17 19:18:18 xxxxx nnrpd[15814]: cc204106-a.sneek1.fr.home.nl
> auth_err ckpasswd: user guest does not exist.
> Sep 20 05:47:08 xxxxx nnrpd[25317]:
> host81-129-119-198.in-addr.btopenworld.com auth_err ckpasswd: user
> guest does not exist.

Hmm, wenn ich es mir nun so recht �berlege - dieser
"cc402396-a.sneek1.fr.home.nl" ist mir etwas verd�chtig. Die Viruswelle
begann bei mir am 19. September Abends mit den ersten Mails aus *.nl - ein
paar Tage zuvor versucht ein User von "sneek1.fr.home.nl" gleich vier Mal in
meinen Newsserver einzudringen....

-> Ob wir den Virenschreiber wohl bei "sneek1.fr.home.nl" suchen m�ssen?

Viele Gr�sse

Martin
Technical Details
Message-ID: <bkjpln$66f$1@garfield.wizonet.ch>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-08!supernews.com!news.tele.dk!news.tele.dk!small.news.tele.dk!fu-berlin.de!news.wizonet.ch!news.wizonet.ch!not-for-mail
References: <bkflh3$8mq$1@magma.woody.ch> <bkjp4d$a0a$1@garfield.wizonet.ch>

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII
X-Google-Thread: 11008d,f39af1547b51d490
X-Google-Attributes: gid11008d,public
X-Google-Thread: fa123,f39af1547b51d490
X-Google-Attributes: gidfa123,public
X-Google-ArrivalTime: 2003-09-21 02:06:02 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-08!supernews.com!news.tele.dk!news.tele.dk!small.news.tele.dk!fu-berlin.de!news.wizonet.ch!news.wizonet.ch!not-for-mail
From: "Martin Willisegger" <trash.2003@wizonet.ch>
Newsgroups: ch.comp.networks,ch.admin
Subject: Re: Gibe/Swen scannt aktiv newsgroups
Date: Sun, 21 Sep 2003 11:05:57 +0200
Organization: WIZOnet network news system
Lines: 35
Message-ID: <bkjpln$66f$1@garfield.wizonet.ch>
References: <bkflh3$8mq$1@magma.woody.ch> <bkjp4d$a0a$1@garfield.wizonet.ch>
Reply-To: "Martin Willisegger" <newsgroup.2003@wizonet.ch>
NNTP-Posting-Host: pilu.wizonet.ch
Mime-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Trace: garfield.wizonet.ch 1064135159 6351 62.2.214.90 (21 Sep 2003 09:05:59 GMT)
X-Complaints-To: newsmaster@wizonet.ch
NNTP-Posting-Date: Sun, 21 Sep 2003 09:05:59 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165