Jump to content
dj_oko

Kretyn.com.http

Recommended Posts

Więc tak: mój komputer (w tym tygodniu pod adresem 192.168.0.166) jest podłaczony do internetu przez router (192.168.0.1).

Puściłem tcpdumpa i oto, co widzę:

23:12:47.883152 IP (tos 0xc0, ttl 64, id 20757, offset 0, flags [none], proto ICMP (1), length 80) 192.168.0.166 > kretyn.com: ICMP host 192.168.0.166 unreachable - admin prohibited, length 60
        IP (tos 0x0, ttl 54, id 36192, offset 0, flags [DF], proto TCP (6), length 52) kretyn.com.http > 192.168.0.166.54671: ., cksum 0x5cf9 (correct), 0:0(0) ack 1 win 33304 <nop,nop,timestamp 327270102 14508665>
23:12:47.883209 IP (tos 0x0, ttl 54, id 36193, offset 0, flags [none], proto TCP (6), length 40) kretyn.com.http > 192.168.0.166.54671: ., cksum 0x4dd8 (correct), 4294967295:4294967295(0) ack 1 win 0
23:12:47.883230 IP (tos 0xc0, ttl 64, id 20758, offset 0, flags [none], proto ICMP (1), length 68) 192.168.0.166 > kretyn.com: ICMP host 192.168.0.166 unreachable - admin prohibited, length 48
        IP (tos 0x0, ttl 54, id 36193, offset 0, flags [none], proto TCP (6), length 40) kretyn.com.http > 192.168.0.166.54671: ., cksum 0x4dd8 (correct), 4294967295:4294967295(0) ack 1 win 0

 

Pytam więc - co to jest? Znalazłem to: http://jogger.piio.info/2008/04/17/atak/

Ale mój komputer jest za routerem! Zaznaczam, że to nie jest żaden z programów!

netstat -atnp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name   
tcp        0      0 127.0.0.1:8000              0.0.0.0:*                   LISTEN      2740/nasd           
tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN      2857/cupsd

 

Ratunku!

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...