s42

s42



File Edit View lerminal Tabs Help


root@honeypot honeyd# honeyd -d -u 0 -g 0 -f config4 10.0.0.4-10.0.0.254 Honeyd V0.8b Copyright (c) 2002-2004 Niels Provos

honeyd]6342]: started with -d -u 0 -g 0 -f config4 10.0.0.4-10.0.0.254 Warning: Impossible SI rangę in Class fingerprint "IBM 0S/400 V4R2M0"

Warning: Impossible SI rangę in Class fingerprint "Microsoft Windows NT 4.0 SP3"

honeyd[6342]: listening promiscuously on ethO: (arp or ip proto 47 or (ip and (dst net 10.0.0.4/30 or dst net 1

.0.0.8/29 or dst net 10.0.0.16/28 or dst net 10.0.0.32/27 or dst net 10.0.0.64/26 or dst net 10.0.0.128/26 or d

t net 10.0.0.192/27 or dst net 10.0.0.224/28 or dst net 10.0.0.240/29 or dst net 10.0.0.248/30 or dst net 10.0.

.252/31 or dst net 10.0.0.254/32))) and not ether src 00:00:39:af:68:f7

honeyd]6342]: Demoting process privileges to uid O, gid O

honeyd]6342]: Connection request: tcp (10.0.0.1:1034 - 10.0.0.150:9996)

honeyd]6342]: Connection established: tcp (10.0.0.1:1034 - 10.0.0.150:9996) <-> /bin/sh scripts/Sasser_Cleaner. h 10.0.0.1 10.0.0.150

honeyd]6342]: El 10.0.0.1:1034 - 10.0.0.150:9996): Pseudo-terminal will not be allocated because stdin is not a erminal.

honeyd]6342]: El 10.O.0.1:1034 - 10.0.0.150:9996):

****USAGE WARNING****

This is a private Computer system. This Computer system, including all related equipment, networks, and network devices (specifically including Internet access) are provided only for authorized use. This Computer system may be monitored for all lawful purposes, including to ensure that its use is authorized, for management of the system, to facilitate protection against unauthorized access, and to verify security procedures, survivability, and operational security. Monitoring includes active attacks by authorized entities to test or verify the security of this system. During monitoring, information may be examined, recorded, copied and used for authorized purposes. All information, including personal information, placed or sent over this system may be monitored.

Use of this Computer system, authorized or unauthorized, constitutes consent to monitoring of this system. Unauthorized use may subject you to criminal prosecution. Evidence of una

honeyd]6342]: E(10.O.O.1:1034 - 10.0.0.150:9996): thorized use collected during monitoring may be used for administrative, criminal, or other adverse action. Use of this system constitutes consent to monitoring for these purposes.

honeyd]6342]: Expiring TCP (10.0.0.1:1034 - 10.0.0.150:9996) (0x832ale0) in state 7


Wyszukiwarka

Podobne podstrony:
s3 (2) File Edit View lerminal Tabs Help root@honeypot honeyd# arpd -d 10.0.0.10-10.0.0.12 arpd[6
s40 File Edit View lerminal Tabs Help root@honeypot honeyd# arpd -d 10.0.0.4-10.0.0.254 arpd[6301
s5 (3) File Edit View lerminal Tabs Help root@honeypot honeyd# arpd -d 10.0.0.10-10.0.0.12 arpd[6
s11 (2) File Edit View lerminal Tabs Help root@honeypot honeyd# cat logs/test .log Tue Feb 22 11:
s43 Terminal File Edit View lerminal Tabs Help root@honeypot honeyd# cat /worms/cłeanup Thu Feb
s23 TerminalFile Edit View lerminal Tabs Help root@honeypot honeyd# arpd -d 10.0.0.4-10.0.0.254 arpd
s25 TerminaloxFile Edit View lerminal Tabs Help root@honeypot honeyd# arpd -d 10.0.0.4-10.0.0.254 ar
s33 Terminal File Edit View Terminal Tabs Help root@honeypot honeyd# ssh -1 Administ
s13 (2) == Terminal File Edit View lerminal Tabs Help root@evil : ~# ping 10.0.0.123 PING 10.0.0
s22 minal File Edit View lerminal Tabs Help root@evil:~# telnet 10.0.0.200 4444 T rying
s24 :_File Edit View lerminal Tabs Help root@evil:~# telnet 10.0.0.200 9996 T rying 10.0.0.200... Co
s37 File Edit View Terminal Tabs Help root@honeypot Scripts# gcc -o dcom_exploit ocl92-dcom.c ocl9
2u El S?
s10 (3) File Edit View lerminal Tabs Help arpd! 6210): arpd_timeout:
s18 Terminal File Edit View lerminal Tabs Help # # ftpusers This file describes the names of th
s1 (2) Terminal File Edit View lerminal Tabs Help create linux set linux personality "Linu
s20 — — 1 1 1 ninal File Edit View lerminal Tabs Help DATE= datę +’.s mkdir
s21 :: Terminal File Edit View lerminal Tabs Help DATE= datę +%s mkdir /vorms/Sasser/$l-$2-$DAT

więcej podobnych podstron