Dnevno mi stigne oko desetak obavijesti o obrisanih NAMETNIKA VIRUSA
Postovani,
iz vasih prijava ne moze se utvrditi o kojim se korisnicima radi,
buduci da je za njihovo identificiranje potrebno vise podataka,
a koji se mogu dobiti samo iz detaljnog zaglavlja e-mail poruke
(u ovim slucajevima). Stoga Vas molimo da svaki prijavljeni
incident potkrijepite s navedenim dokazima.
Vise informacija o pravilnom prijavljivanju incidenata i ostalim
pitanjima mozete pronaci na:
http://www.carnet.hr/tematski/sigurnost/pitanja
S postovanjem,
CARNet abuse
XXXXXXXX@ciciban-blog.com wrote:
> > Postovani,
> >
> > kako je Internet globalna mreza na kojoj su u svakom trenutku spojeni
> > milijuni korisnika, ono sto se dogadja vama je uobicajena pojava. Virus
> > ili crv koji se nalazi na nekom od zarazenih racunala se pokusava
> > prosiriti na druga (nezasticena) racunala te poradi toga konstantno
> > skenira portove na svim racunalima koja vidi trazeci neku ranjivost koju
> > bi mogao iskoristiti da se prosiri na drugo racunalo. Vas osobni
> > firewall vas iz toga razloga alarmira da netko skenira vase portove i
> > zbog toga se ne trebate brinuti buduci vas je vas osobni firewall
> > zastitio u tim slucajevima. Takodjer preporucamo kao dodatnu, ali nikako
> > i suvisnu, mjeru osiguranja instalaciju antivirusnog softvera i njegovo
> > redovito osvjezavanje, te redovito krpanje operacijskog sustava.
> >
> > Ukoliko se napadi ponavljaju kroz duze vrijeme i dolaze s iste IP adrese
> > tada je moguce da ste objekt ciljanog napada i u tom slucaju nam
> > prijavite to na sljedecu adresu:
> >
> > abuse@carnet.hr
> >
> > --
> > CARNet Abuse
> > www.carnet.hr/abuse
> S obzirom da se nastavlja bombardiranje, virusima a moj Firewall radi
> savršeno, u svakom slučaju hvala na savjetu da krpam rupe, jasno je
> meni da je to globalna mreža, a još jasnije je da putem Carneta sve
> dolazi stoga biste trebali Vi reagirati što konačno i morate jer tako
> propisi i Zakoni govore.. U privitku Vam šaljem, novo pristigle
> obavijesti..o obrisanim Virusima
> S Poštovanjem ,
>
> Ciciban
>
> ----- Original Message -----
> From: "CARNet Abuse"
> To:
> Sent: Monday, June 20, 2005 3:18 PM
> Subject: Re: cn#103669 - napadi virusima i provale u računalo
>
> >VIRUS ALERT
Our content checker found
Win32/Mytob.CX worm
virus in an email to you from:
?@cmung1978.cmu.carnet.hr
Not quarantined.
Ova poruka je pregledana antivirusnim sustavom
NOD32 za Linux Mail Server
VIRUS ALERT
Our content checker found
Win32/Mytob.CX worm
virus in an email to you from:
?@cmung1812.cmu.carnet.hr
Not quarantinedVIRUS ALERT
Our content checker found 6.7.2005.-13,40
Win32/Mytob.CX worm
virus in an email to you from:
?@cmung2207.cmu.carnet.hr
Not quarantined.
Ova poruka je pregledana antivirusnim sustavom
NOD32 za Linux Mail Server
28.6.2005 9:20:41 Your computer has been attacked from 60.176.134.219. Attack - Helkern. The attack has been successfully repulsed.
28.6.2005 21:42:07 Your computer has been attacked from 222.174.115.18. Attack - Helkern. The attack has been successfully repulsed.
28.6.2005 23:58:17 Your computer has been attacked from 61.152.251.4. Attack - Helkern. The attack has been successfully repulsed.
29.6.2005 8:18:24 Your computer has been attacked from 218.13.180.138. Attack - Helkern. The attack has been successfully repulsed.
29.6.2005 18:50:10 Your computer has been attacked from 61.134.53.62. Attack - Helkern. The attack has been successfully repulsed.
29.6.2005 22:49:03 Your computer has been attacked from 222.174.115.18. Attack - Helkern. The attack has been successfully repulsed.
30.6.2005 8:16:10 Your computer has been attacked from 61.139.57.108. Attack - Helkern. The attack has been successfully repulsed.
30.6.2005 8:26:06 Your computer has been attacked from 80.231.169.58. Attack - Helkern. The attack has been successfully repulsed.
30.6.2005 18:31:40 Your computer has been attacked from 221.202.129.164. Attack - Helkern. The attack has been successfully repulsed.
30.6.2005 19:47:48 Your computer has been attacked from focusrt.com. Attack - Helkern. The attack has been successfully repulsed.
30.6.2005 21:04:45 Your computer has been attacked from 202.101.187.162. Attack - Helkern. The attack has been successfully repulsed.
1.7.2005 17:05:09 Your computer has been attacked from 221.236.9.54. Attack - Helkern. The attack has been successfully repulsed.
1.7.2005 23:57:33 Your computer has been attacked from 221.202.129.164. Attack - Helkern. The attack has been successfully repulsed.
2.7.2005 0:12:04 Your computer has been attacked from 38.113.141.135. Attack - Helkern. The attack has been successfully repulsed.
2.7.2005 0:23:49 Your computer has been attacked from 210.74.232.191. Attack - Helkern. The attack has been successfully repulsed.
2.7.2005 8:06:23 Your computer has been attacked from p4212-ipbf11souka.saitama.ocn.ne.jp. Attack - Helkern. The attack has been successfully repulsed.
2.7.2005 18:11:47 Your computer has been attacked from 219.84.167.37. Attack - Helkern. The attack has been successfully repulsed.
Post je objavljen 06.07.2005. u 22:58 sati.