[[distcc]]
 

oppsummering

* 4. sept: angriperen kom inn via distcc, satte opp en ftp-server på pondus, pakket ut ftp-server-kode på nemi og cyan. FTP-serveren delte ikke ut filer, bare noen tomme kataloger.

* 15. sept: 14:43: scanner uninett-ftpen? resultatet dumpes til cyan:/tmp/ls-lR og jokke:/tmp/ls-lR.gz

* 15. sept: 15:00: satte igang en portscanner fra cyan.

* 15. sept: 16:17: Usit varsler

* 15. sept: 16:25: vi stenger av

* Dette har ikke gitt utslag på nett-grafene.

Oppslåtte IPer:

Name: uta-rv1lsvqwekx.uta.edu
Address: 129.107.42.2

Name: ut-9soo3gy83gg0.uta.edu
Address: 129.107.48.121

Name: a8.neckermann.nz.nextra.sk
Address: 195.168.95.8

Name: dev7.stockpoint.com
Address: 204.71.102.147

Name: h213-213-86-26.albacom.net
Address: 213.213.86.26

Name: 217-162-254-121.dclient.hispeed.ch
Address: 217.162.254.121

Name: pD9E50CD9.dip.t-dialin.net
Address: 217.229.12.217

Name: pD959054C.dip.t-dialin.net
Address: 217.89.5.76

Name: S010600a04b073913.wp.shawcable.net
Address: 24.77.178.163

Name: bigboombob.usadatanet.net
Address: 66.218.0.50

Name: ip68-14-6-230.ri.ri.cox.net
Address: 68.14.6.230

Name: host117-60.pool8020.interbusiness.it
Address: 80.20.60.117

Name: 81-223-125-19.xdsl-home-dyn.inode.at
Address: 81.223.125.19

Name: host81-106.pool8175.interbusiness.it
Address: 81.75.106.81

Name: i538749CE.versanet.de
Address: 83.135.73.206

194.129.129.222 does not exist, try again
194.3.104.28 does not exist, try again
209.13.254.4 does not exist, try again

81.223.125.215 PTR record not found, server failure

Uoppslåtte IPer, per maskin

nemi:
129.107.42.2
129.107.48.121
194.129.129.222
194.3.104.28
195.168.95.8
217.162.254.121
217.229.12.217
217.89.5.76
66.218.0.50
80.20.60.117
81.223.125.215
81.75.106.81

jokke:
129.107.42.2
129.107.48.121
194.129.129.222
194.3.104.28
195.168.95.8
217.162.254.121
217.229.12.217
217.89.5.76
66.218.0.50
68.14.6.230
80.20.60.117
81.223.125.19
81.223.125.215
81.75.106.81

else:
204.71.102.147
209.13.254.4
213.213.86.26
24.77.178.163
83.135.73.206

pondus:
194.129.129.222
195.168.95.8
217.162.254.121
217.229.12.217
217.89.5.76
66.218.0.50
80.20.60.117
81.223.125.215

cyan:
129.107.42.2
129.107.48.121
194.129.129.222
194.3.104.28
195.168.95.8
217.162.254.121
217.229.12.217
217.89.5.76
66.218.0.50
80.20.60.117
81.223.125.19
81.223.125.215
81.75.106.81

 
distcc.txt · Last modified: 2007/03/16 16:45
 
Wiki Syntax