From mboxrd@z Thu Jan  1 00:00:00 1970
From: Carlos E Gorges <carlos@techlinux.com.br>
Subject: Re: some body hacked my system
Date: Tue, 8 Oct 2002 12:41:13 -0300
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <200210081241.13436.carlos@techlinux.com.br>
References: <001e01c26edc$73aca530$8c01a8c0@sundaram>
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <001e01c26edc$73aca530$8c01a8c0@sundaram>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
Content-Type: text/plain; charset="iso-8859-1"
To: Sundaram Ramasamy <sun@percipia.com>, netfilter@lists.netfilter.org

On Ter=E7a 08 Outubro 2002 12:07, Sundaram Ramasamy wrote:
> Hi,
>
> I am allowing ftp connection in my firewall, some body used ftp port,
> filled my hard disk space. He logged-in from 68.65.58.159 IP
> (/var/log/message)
>
> Oct  8 00:57:03 linux2 ftpd[25101]: FTP LOGIN FROM
> va-staff-u1-c5a-159.frbgva.adelphia.net [68.65.58.159]
>
> he created directory named WC3 and transfed follwoing files.
>
> bash-2.04# cd WC3
> bash-2.04# ls
> wc3.part01.rar.gz  wc3.part07.rar.gz  wc3.part13.rar.gz  wc3.part19.rar=
.gz
> wc3.part02.rar.gz  wc3.part08.rar.gz  wc3.part14.rar.gz  wc3.part20.rar=
.gz
> wc3.part03.rar.gz  wc3.part09.rar.gz  wc3.part15.rar.gz  wc3.part21.rar=
.gz
> wc3.part04.rar.gz  wc3.part10.rar.gz  wc3.part16.rar.gz
> wc3.part05.rar.gz  wc3.part11.rar.gz  wc3.part17.rar.gz
> wc3.part06.rar.gz  wc3.part12.rar.gz  wc3.part18.rar.gz

Wacraft 3 warez ?

--=20
	 _________________________
	 Carlos E Gorges         =20
	 (carlos@techlinux.com.br)
	 Tech inform=E1tica LTDA
	 Brazil                  =20
	 _________________________