[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Sheflug] ICQ and IRC



Dear All

After several years of being broken into after using ICQ and IRC I now
run several security apps which tell me when someone is having a go at
me - yet again.

For some reason the ICQ people who I think are AOL are particularly
bad when it comes to network security.  The other day I thought I'd
have a quick look into ICQ on Linux and tried to connect to their
server with Kicq.  Here's a small part of /var/log/messages that you
can see below.  It may well be that this is the ICQ server trying to
authenticate something with my machine.  However, anything of this
sort is best discouraged or disabled over a network if it can be
done.........


 Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 L=49 
S=0x00 I=54320 F=0x0000 T=44 (#11) Dec 22 18:49:14 bolehill kernel:
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 
L=81 S=0x00 I=54895 F=0x0000 T=44 (#11) Dec 22 18:49:19 bolehill
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000 
194.247.44.163:1041 L=100 S=0x00 I=57003 F=0x0000 T=44 (#11) Dec 22
18:49:25 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17 
205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00 I=59660 F=0x0000
T=44 (#11) Dec 22 18:49:25 bolehill kernel: Packet log: ppp DENY ippp0 
PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=100 S=0x00 I=59661
F=0x0000 T=44 (#11) Dec 22 18:49:31 bolehill kernel: Packet log: ppp
DENY 
ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00
I=62123 F=0x0000 T=44 (#11) Dec 22 18:49:31 bolehill kernel: Packet
log: ppp 
DENY ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=100
S=0x00 I=62124 F=0x0000 T=44 (#11) Dec 22 18:49:37 bolehill kernel:
Packet log: 
ppp DENY ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=81
S=0x00 I=64585 F=0x0000 T=44 (#11) Dec 22 18:49:37 bolehill kernel:
Packet 
log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041
L=100 S=0x00 I=64586 F=0x0000 T=44 (#11) Dec 22 18:49:43 bolehill
kernel: 
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 L=81 S=0x00 I=1632 F=0x0000 T=44 (#11) Dec 22
18:49:43 bolehill kernel: 
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 L=100 S=0x00 I=1633 F=0x0000 T=44 (#11) Dec 22
18:49:49 bolehill 
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 L=81 S=0x00 I=4210 F=0x0000 T=44 (#11) Dec 22
18:49:49 bolehill 
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 L=100 S=0x00 I=4211 F=0x0000 T=44 (#11) Dec 22
18:49:55 
bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00 I=6688 F=0x0000
T=44 (#11) Dec 22 18:49:55 
bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=100 S=0x00 I=6689 F=0x0000
T=44 (#11) Dec 22 
18:50:01 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00 I=9196 F=0x0000
T=43 (#11) Dec 22 
18:50:01 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=100 S=0x00 I=9197 F=0x0000
T=44 (#11) Dec 
22 18:50:07 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00 I=11694 F=0x0000
T=44 (#11) 
Dec 22 18:50:07 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.108:4000 194.247.44.163:1041 L=100 S=0x00 I=11695 F=0x0000
T=44 
(#11) Dec 22 18:50:13 bolehill kernel: Packet log: ppp DENY ippp0
PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=81 S=0x00 I=14248
F=0x0000 
T=44 (#11) Dec 22 18:50:13 bolehill kernel: Packet log: ppp DENY ippp0
PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=100 S=0x00 I=14249 
F=0x0000 T=44 (#11) Dec 22 18:50:19 bolehill kernel: Packet log: ppp
DENY ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041 L=81
S=0x00 
I=16732 F=0x0000 T=44 (#11) Dec 22 18:50:19 bolehill kernel: Packet
log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000 194.247.44.163:1041
L=100 
S=0x00 I=16733 F=0x0000 T=44 (#11) Dec 22 18:50:25 bolehill kernel:
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.108:4000
194.247.44.163:1041 
L=49 S=0x00 I=19169 F=0x0000 T=43 (#11) Dec 22 18:50:39 bolehill
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000 
194.247.44.163:1042 L=49 S=0x00 I=19313 F=0x4000 T=234 (#11) Dec 22
18:50:41 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17 
205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00 I=19314 F=0x4000
T=235 (#11) Dec 22 18:50:46 bolehill kernel: Packet log: ppp DENY
ippp0 
PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=100 S=0x00 I=19315
F=0x4000 T=235 (#11) Dec 22 18:50:52 bolehill kernel: Packet log: ppp
DENY 
ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00
I=19316 F=0x4000 T=235 (#11) Dec 22 18:50:52 bolehill kernel: Packet
log: ppp 
DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=100
S=0x00 I=19317 F=0x4000 T=235 (#11) Dec 22 18:50:58 bolehill kernel:
Packet log: 
ppp DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=81
S=0x00 I=19318 F=0x4000 T=235 (#11) Dec 22 18:50:58 bolehill kernel:
Packet 
log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042
L=100 S=0x00 I=19319 F=0x4000 T=235 (#11) Dec 22 18:51:04 bolehill
kernel: 
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000
194.247.44.163:1042 L=81 S=0x00 I=19320 F=0x4000 T=235 (#11) Dec 22
18:51:04 bolehill 
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000
194.247.44.163:1042 L=100 S=0x00 I=19321 F=0x4000 T=235 (#11) Dec 22
18:51:10 
bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00 I=19322 F=0x4000
T=235 (#11) Dec 22 
18:51:10 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.104:4000 194.247.44.163:1042 L=100 S=0x00 I=19323 F=0x4000
T=235 (#11) Dec 
22 18:51:16 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00 I=19324 F=0x4000
T=235 (#11) 
Dec 22 18:51:16 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17
205.188.153.104:4000 194.247.44.163:1042 L=100 S=0x00 I=19325 F=0x4000
T=235 
(#11) Dec 22 18:51:22 bolehill kernel: Packet log: ppp DENY ippp0
PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00 I=19326
F=0x4000 
T=235 (#11) Dec 22 18:51:22 bolehill kernel: Packet log: ppp DENY
ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=100 S=0x00
I=19327 
F=0x4000 T=235 (#11) Dec 22 18:51:28 bolehill kernel: Packet log: ppp
DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=81
S=0x00 
I=19328 F=0x4000 T=235 (#11) Dec 22 18:51:28 bolehill kernel: Packet
log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042
L=100 
S=0x00 I=19329 F=0x4000 T=235 (#11) Dec 22 18:51:34 bolehill kernel:
Packet log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000
194.247.44.163:1042 
L=81 S=0x00 I=19330 F=0x4000 T=235 (#11) Dec 22 18:51:34 bolehill
kernel: Packet log: ppp DENY ippp0 PROTO=17 205.188.153.104:4000 
194.247.44.163:1042 L=100 S=0x00 I=19331 F=0x4000 T=235 (#11) Dec 22
18:51:40 bolehill kernel: Packet log: ppp DENY ippp0 PROTO=17 
205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00 I=19332 F=0x4000
T=235 (#11) Dec 22 18:51:40 bolehill kernel: Packet log: ppp DENY
ippp0 
PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=100 S=0x00 I=19333
F=0x4000 T=235 (#11) Dec 22 18:51:46 bolehill kernel: Packet log: ppp
DENY 
ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=81 S=0x00
I=19334 F=0x4000 T=235 (#11) Dec 22 18:51:46 bolehill kernel: Packet
log: ppp 
DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=100
S=0x00 I=19335 F=0x4000 T=235 (#11) Dec 22 18:51:52 bolehill kernel:
Packet log: 
ppp DENY ippp0 PROTO=17 205.188.153.104:4000 194.247.44.163:1042 L=49
S=0x00 I=19336 F=0x4000 T=234 (#11) Dec 22 18:52:22 bolehill
ipppd[171]: 
Modem hangup Dec 22 18:52:22 bolehill ipppd[171]: Connection
terminated. Dec 22 18:52:22 bolehill ipppd[171]: taking down
PHASE_DEAD link 0, linkunit: 0 
Dec 22 18:52:22 bolehill ipppd[171]: closing fd 7 from unit 0 Dec 22
18:52:22 bolehill ipppd[171]: link 0 closed , linkunit: 0 Dec 22
18:52:22 bolehill ipppd[171]: 
reinit_unit: 0 



-- 
Richard

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.