Re: Problema [NicMC @ 2010-10-17 23:19:32]

Tema: Re: Problema
Autorius: NicMC
Data: 2010-10-17 23:19:32
On 2010.10.15 10:35, Idomu wrote:
> tcp        0      1 www.xxx.xxx:41602         www.irrp.org.ua:ircd
> SYN_SENT    21698/sshd:
>
> tcp        0      1 www.xxx.xxx:40964         www.irrp.org.ua:ircd
> SYN_SENT    13812/sshd:
>
> tcp        0      0 www.xxx.xxx:41045         www.irrp.org.ua:ircd
> ESTABLISHED 30397/sshd:
>
> tcp        0      1 www.xxx.xxx:42836         www.irrp.org.ua:ircd
> SYN_SENT    20227/sshd:
>
> tcp        0      1 www.xxx.xxx:43002         www.irrp.org.ua:ircd
> SYN_SENT    19599/sshd:
>
> tcp        0      1 www.xxx.xxx:43417         www.irrp.org.ua:ircd
> SYN_SENT    4043/sshd:
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3660
> TIME_WAIT   -
>
> tcp        0      1 www.xxx.xxx:45617         www.irrp.org.ua:ircd
> SYN_SENT    20028/sshd:
>
> tcp        0      1 www.xxx.xxx:47005         www.irrp.org.ua:ircd
> SYN_SENT    9362/sshd:
>
> tcp        0      1 www.xxx.xxx:46140         www.irrp.org.ua:ircd
> SYN_SENT    28397/sshd:
>
> tcp        0      1 www.xxx.xxx:47833         www.irrp.org.ua:ircd
> SYN_SENT    21565/sshd:
>
> tcp        0      1 www.xxx.xxx:47819         www.irrp.org.ua:ircd
> SYN_SENT    23774/sshd:
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3674
> TIME_WAIT   -
>
> tcp        0      1 www.xxx.xxx:47270         www.irrp.org.ua:ircd
> SYN_SENT    13625/sshd:
>
> tcp        0      1 www.xxx.xxx:47324         www.irrp.org.ua:ircd
> SYN_SENT    29728/sshd:
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3676
> TIME_WAIT   -
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3678
> TIME_WAIT   -
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3680
> TIME_WAIT   -
>
> tcp        0      1 www.xxx.xxx:33525         www.irrp.org.ua:ircd
> SYN_SENT    22203/sshd:
>
> tcp        0      1 www.xxx.xxx:32940         www.irrp.org.ua:ircd
> SYN_SENT    5330/sshd:
>
> tcp        0      1 www.xxx.xxx:32978         www.irrp.org.ua:ircd
> SYN_SENT    18157/sshd:
>
> tcp        0      1 www.xxx.xxx:33198         www.irrp.org.ua:ircd
> SYN_SENT    13399/sshd:
>
> tcp        0      1 www.xxx.xxx:35508         www.irrp.org.ua:ircd
> SYN_SENT    3577/sshd:
>
> tcp        0      1 www.xxx.xxx:35587         www.irrp.org.ua:ircd
> SYN_SENT    30051/sshd:
>
> tcp        0      1 www.xxx.xxx:35605         www.irrp.org.ua:ircd
> SYN_SENT    22380/sshd:
>
> tcp        0      1 www.xxx.xxx:35785         www.irrp.org.ua:ircd
> SYN_SENT    31830/sshd:
>
> tcp        0      1 www.xxx.xxx:34859         www.irrp.org.ua:ircd
> SYN_SENT    32212/sshd:
>
> tcp        0      0 www.xxx.xxx:35024         www.irrp.org.ua:ircd
> ESTABLISHED 32526/sshd:
>
> tcp        0      1 www.xxx.xxx:36842         www.irrp.org.ua:ircd
> SYN_SENT    22484/sshd:
>
> tcp        0      1 www.xxx.xxx:35962         www.irrp.org.ua:ircd
> SYN_SENT    23776/sshd:
>
> tcp        0      1 www.xxx.xxx:36027         www.irrp.org.ua:ircd
> SYN_SENT    32349/sshd:
>
> tcp        0      1 www.xxx.xxx:36177         www.irrp.org.ua:ircd
> SYN_SENT    3373/sshd:
>
> tcp        0      0 www.xxx.xxx:37539         www.irrp.org.ua:ircd
> ESTABLISHED 31821/sshd:
>
> tcp        0      1 www.xxx.xxx:37784         www.irrp.org.ua:ircd
> SYN_SENT    11581/sshd:
>
> tcp        0      1 www.xxx.xxx:37247         www.irrp.org.ua:ircd
> SYN_SENT    25830/sshd:
>
> tcp        0      1 www.xxx.xxx:38662         www.irrp.org.ua:ircd
> SYN_SENT    16184/sshd:
>
> tcp        0      1 www.xxx.xxx:38802         www.irrp.org.ua:ircd
> SYN_SENT    9790/sshd:
>
> tcp        0      1 www.xxx.xxx:38353         www.irrp.org.ua:ircd
> SYN_SENT    26291/sshd:
>
> tcp        0      1 www.xxx.xxx:39881         www.irrp.org.ua:ircd
> SYN_SENT    6136/sshd:
>
> tcp        0      1 www.xxx.xxx:39419         www.irrp.org.ua:ircd
> SYN_SENT    5884/sshd:
>
> tcp        0      1 www.xxx.xxx:40473         www.irrp.org.ua:ircd
> SYN_SENT    29850/sshd:
>
> tcp        0      1 www.xxx.xxx:40569         www.irrp.org.ua:ircd
> SYN_SENT    23989/sshd:
>
> tcp        0      1 www.xxx.xxx:40567         www.irrp.org.ua:ircd
> SYN_SENT    3972/sshd:
>
> tcp        0      1 www.xxx.xxx:40202         www.irrp.org.ua:ircd
> SYN_SENT    15837/sshd:
>
> tcp        0      1 www.xxx.xxx:59192         www.irrp.org.ua:ircd
> SYN_SENT    7838/sshd:
>
> tcp        0      1 www.xxx.xxx:59389         www.irrp.org.ua:ircd
> SYN_SENT    1913/sshd:
>
> tcp        0      1 www.xxx.xxx:59829         www.irrp.org.ua:ircd
> SYN_SENT    13610/sshd:
>
> tcp        0      1 www.xxx.xxx:60745         www.irrp.org.ua:ircd
> SYN_SENT    20008/sshd:
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3607
> TIME_WAIT   -
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3611
> TIME_WAIT   -
>
> tcp        0      1 www.xxx.xxx:49760         www.irrp.org.ua:ircd
> SYN_SENT    32493/sshd:
>
> tcp        0      1 www.xxx.xxx:49675         www.irrp.org.ua:ircd
> SYN_SENT    1801/sshd:
>
> tcp        0      1 www.xxx.xxx:49828         www.irrp.org.ua:ircd
> SYN_SENT    11630/sshd:
>
> tcp        0      1 www.xxx.xxx:49362         www.irrp.org.ua:ircd
> SYN_SENT    18315/sshd:
>
> tcp        0      0 www.xxx.xxx:http          189.115.38.86.ip.erdve:3618
> TIME_WAIT   -
>
> tcp        0      1 www.xxx.xxx:49409         www.irrp.org.ua:ircd
> SYN_SENT    26615/sshd:
>
> tcp        0      1 www.xxx.xxx:49421         www.irrp.org.ua:ircd
> SYN_SENT    31988/sshd:
>
> tcp        0      1 www.xxx.xxx:50995         www.irrp.org.ua:ircd
> SYN_SENT    26518/sshd:
>
> tcp        0      1 www.xxx.xxx:51000         www.irrp.org.ua:ircd
> SYN_SENT    24558/sshd:


Ne prie tavęs o iš tavęs. Eilinis botnetas tikrinasi užduotis. System 
compromised, ką jau ir pats supratai...