Article View: ch.comp.networks
Article #347Re: Gibe/Swen scannt aktiv newsgroups
From: Martin Willisegger
Date: Sun, 21 Sep 2003 09:05
Date: Sun, 21 Sep 2003 09:05
34 lines
2779 bytes
2779 bytes
Hallo Martin Willisegger schrieb: > Sep 15 08:43:21 xxxxx nnrpd[30801]: > 82-37-24-180.cable.ubr04.wolv.blueyonder.co.uk auth_err ckpasswd: > user guest does not exist. > Sep 15 16:37:38 xxxxx nnrpd[7247]: cc402396-a.sneek1.fr.home.nl > auth_err ckpasswd: user guest does not exist. > Sep 15 21:17:52 xxxxx nnrpd[31153]: cc402396-a.sneek1.fr.home.nl > auth_err ckpasswd: user guest does not exist. > Sep 15 23:09:03 xxxxx nnrpd[10697]: pd9e48685.dip.t-dialin.net > auth_err ckpasswd: user guest does not exist. > Sep 16 18:29:03 xxxxx nnrpd[28260]: cc402396-a.sneek1.fr.home.nl > auth_err ckpasswd: user guest does not exist. > Sep 17 02:21:23 xxxxx nnrpd[14744]: qn-213-73-241-251.quicknet.nl > auth_err ckpasswd: user guest does not exist. > Sep 17 19:18:18 xxxxx nnrpd[15814]: cc204106-a.sneek1.fr.home.nl > auth_err ckpasswd: user guest does not exist. > Sep 20 05:47:08 xxxxx nnrpd[25317]: > host81-129-119-198.in-addr.btopenworld.com auth_err ckpasswd: user > guest does not exist. Hmm, wenn ich es mir nun so recht �berlege - dieser "cc402396-a.sneek1.fr.home.nl" ist mir etwas verd�chtig. Die Viruswelle begann bei mir am 19. September Abends mit den ersten Mails aus *.nl - ein paar Tage zuvor versucht ein User von "sneek1.fr.home.nl" gleich vier Mal in meinen Newsserver einzudringen.... -> Ob wir den Virenschreiber wohl bei "sneek1.fr.home.nl" suchen m�ssen? Viele Gr�sse Martin
Technical Details
Message-ID:
<bkjpln$66f$1@garfield.wizonet.ch>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-08!supernews.com!news.tele.dk!news.tele.dk!small.news.tele.dk!fu-berlin.de!news.wizonet.ch!news.wizonet.ch!not-for-mailReferences:
<bkflh3$8mq$1@magma.woody.ch> <bkjp4d$a0a$1@garfield.wizonet.ch>Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII X-Google-Thread: 11008d,f39af1547b51d490 X-Google-Attributes: gid11008d,public X-Google-Thread: fa123,f39af1547b51d490 X-Google-Attributes: gidfa123,public X-Google-ArrivalTime: 2003-09-21 02:06:02 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-03!sn-xit-01!sn-xit-08!supernews.com!news.tele.dk!news.tele.dk!small.news.tele.dk!fu-berlin.de!news.wizonet.ch!news.wizonet.ch!not-for-mail From: "Martin Willisegger" <trash.2003@wizonet.ch> Newsgroups: ch.comp.networks,ch.admin Subject: Re: Gibe/Swen scannt aktiv newsgroups Date: Sun, 21 Sep 2003 11:05:57 +0200 Organization: WIZOnet network news system Lines: 35 Message-ID: <bkjpln$66f$1@garfield.wizonet.ch> References: <bkflh3$8mq$1@magma.woody.ch> <bkjp4d$a0a$1@garfield.wizonet.ch> Reply-To: "Martin Willisegger" <newsgroup.2003@wizonet.ch> NNTP-Posting-Host: pilu.wizonet.ch Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Trace: garfield.wizonet.ch 1064135159 6351 62.2.214.90 (21 Sep 2003 09:05:59 GMT) X-Complaints-To: newsmaster@wizonet.ch NNTP-Posting-Date: Sun, 21 Sep 2003 09:05:59 +0000 (UTC) X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165