Re: Странный лог

on 8.9.04 11:23 PM, (Max) at CGatePro@mx.ru wrote:

> Здравствуйте.
>
> Получил сегодня странный лог, не очень понимаю что пытались делать.

Кто-то ломится через Web интерфейс, возможно это вирус пытается пролезть через дыру в Микрософте.  

> С уважением,
> Максим.
> 17:15:22.45 4 ROUTER Input: LoginPage@ip_moego_servera

ip_moego_servera - это оно так и было или Ва подменили?

> 17:15:22.45 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:22.45 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
> 17:15:22.45 5 ROUTER Parser: LoginPage@[ip_moego_servera] ->
> LoginPage([ip_moego_servera])
> 17:15:22.45 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <mail1.mycompany.ru>
> 17:15:22.45 5 ROUTER Parser: LoginPage@mail1.mycompany.ru ->
> LoginPage(mail1.mycompany.ru)
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <LoginPage> at <>
> 17:15:22.45 5 ROUTER Parser: LoginPage -> LoginPage()
> 17:15:22.45 2 ROUTER LoginPage@ip_moego_servera accepted by LOCAL as
> <LoginPage> at <mail1.mycompany.ru>
> 17:15:22.45 4 ROUTER Input: _vti_bin@ip_moego_servera
> 17:15:22.45 5 ROUTER Parser: _vti_bin@ip_moego_servera ->
> _vti_bin(ip_moego_servera)
> 17:15:22.45 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <[ip_moego_servera]>
> 17:15:22.45 5 ROUTER Parser: _vti_bin@[ip_moego_servera] ->
> _vti_bin([ip_moego_servera])
> 17:15:22.45 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <mail1.mycompany.ru>
> 17:15:22.45 5 ROUTER Parser: _vti_bin@mail1.mycompany.ru ->
> _vti_bin(mail1.mycompany.ru)
> 17:15:22.45 4 ROUTER rerouted with SYSTEM to <_vti_bin> at <>
> 17:15:22.45 5 ROUTER Parser: _vti_bin -> _vti_bin()
> 17:15:22.45 1 ROUTER _vti_bin@ip_moego_servera rejected by SYSTEM: Error
> Code=unknown user account
> 17:15:22.45 2 HTTPU-00139([216.239.244.98]) Failure.wssp retrieved
> 17:15:23.09 4 ROUTER Input: LoginPage@ip_moego_servera
> 17:15:23.09 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:23.09 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
> 17:15:23.09 5 ROUTER Parser: LoginPage@[ip_moego_servera] ->
> LoginPage([ip_moego_servera])
> 17:15:23.09 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <mail1.mycompany.ru>
> 17:15:23.09 5 ROUTER Parser: LoginPage@mail1.mycompany.ru ->
> LoginPage(mail1.mycompany.ru)
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <LoginPage> at <>
> 17:15:23.09 5 ROUTER Parser: LoginPage -> LoginPage()
> 17:15:23.09 2 ROUTER LoginPage@ip_moego_servera accepted by LOCAL as
> <LoginPage> at <mail1.mycompany.ru>
> 17:15:23.09 4 ROUTER Input: _vti_bin@ip_moego_servera
> 17:15:23.09 5 ROUTER Parser: _vti_bin@ip_moego_servera ->
> _vti_bin(ip_moego_servera)
> 17:15:23.09 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <[ip_moego_servera]>
> 17:15:23.09 5 ROUTER Parser: _vti_bin@[ip_moego_servera] ->
> _vti_bin([ip_moego_servera])
> 17:15:23.09 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <mail1.mycompany.ru>
> 17:15:23.09 5 ROUTER Parser: _vti_bin@mail1.mycompany.ru ->
> _vti_bin(mail1.mycompany.ru)
> 17:15:23.09 4 ROUTER rerouted with SYSTEM to <_vti_bin> at <>
> 17:15:23.09 5 ROUTER Parser: _vti_bin -> _vti_bin()
> 17:15:23.09 1 ROUTER _vti_bin@ip_moego_servera rejected by SYSTEM: Error
> Code=unknown user account
> 17:15:23.09 2 HTTPU-00140([216.239.244.98]) Failure.wssp retrieved
> 17:15:23.80 4 ROUTER Input: LoginPage@ip_moego_servera
> 17:15:23.80 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:23.80 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
> 17:15:23.80 5 ROUTER Parser: LoginPage@[ip_moego_servera] ->
> LoginPage([ip_moego_servera])
> 17:15:23.80 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <mail1.mycompany.ru>
> 17:15:23.80 5 ROUTER Parser: LoginPage@mail1.mycompany.ru ->
> LoginPage(mail1.mycompany.ru)
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <LoginPage> at <>
> 17:15:23.80 5 ROUTER Parser: LoginPage -> LoginPage()
> 17:15:23.80 2 ROUTER LoginPage@ip_moego_servera accepted by LOCAL as
> <LoginPage> at <mail1.mycompany.ru>
> 17:15:23.80 4 ROUTER Input: _vti_bin@ip_moego_servera
> 17:15:23.80 5 ROUTER Parser: _vti_bin@ip_moego_servera ->
> _vti_bin(ip_moego_servera)
> 17:15:23.80 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <[ip_moego_servera]>
> 17:15:23.80 5 ROUTER Parser: _vti_bin@[ip_moego_servera] ->
> _vti_bin([ip_moego_servera])
> 17:15:23.80 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <mail1.mycompany.ru>
> 17:15:23.80 5 ROUTER Parser: _vti_bin@mail1.mycompany.ru ->
> _vti_bin(mail1.mycompany.ru)
> 17:15:23.80 4 ROUTER rerouted with SYSTEM to <_vti_bin> at <>
> 17:15:23.80 5 ROUTER Parser: _vti_bin -> _vti_bin()
> 17:15:23.80 1 ROUTER _vti_bin@ip_moego_servera rejected by SYSTEM: Error
> Code=unknown user account
> 17:15:23.80 2 HTTPU-00141([216.239.244.98]) Failure.wssp retrieved
> 17:15:24.52 4 ROUTER Input: LoginPage@ip_moego_servera
> 17:15:24.52 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:24.52 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
> 17:15:24.52 5 ROUTER Parser: LoginPage@[ip_moego_servera] ->
> LoginPage([ip_moego_servera])
> 17:15:24.52 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <mail1.mycompany.ru>
> 17:15:24.52 5 ROUTER Parser: LoginPage@mail1.mycompany.ru ->
> LoginPage(mail1.mycompany.ru)
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <LoginPage> at <>
> 17:15:24.52 5 ROUTER Parser: LoginPage -> LoginPage()
> 17:15:24.52 2 ROUTER LoginPage@ip_moego_servera accepted by LOCAL as
> <LoginPage> at <mail1.mycompany.ru>
> 17:15:24.52 4 ROUTER Input: _vti_bin@ip_moego_servera
> 17:15:24.52 5 ROUTER Parser: _vti_bin@ip_moego_servera ->
> _vti_bin(ip_moego_servera)
> 17:15:24.52 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <[ip_moego_servera]>
> 17:15:24.52 5 ROUTER Parser: _vti_bin@[ip_moego_servera] ->
> _vti_bin([ip_moego_servera])
> 17:15:24.52 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <mail1.mycompany.ru>
> 17:15:24.52 5 ROUTER Parser: _vti_bin@mail1.mycompany.ru ->
> _vti_bin(mail1.mycompany.ru)
> 17:15:24.52 4 ROUTER rerouted with SYSTEM to <_vti_bin> at <>
> 17:15:24.52 5 ROUTER Parser: _vti_bin -> _vti_bin()
> 17:15:24.52 1 ROUTER _vti_bin@ip_moego_servera rejected by SYSTEM: Error
> Code=unknown user account
> 17:15:24.52 2 HTTPU-00142([216.239.244.98]) Failure.wssp retrieved
> 17:15:25.28 4 ROUTER Input: LoginPage@ip_moego_servera
> 17:15:25.28 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:25.28 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
> 17:15:25.28 5 ROUTER Parser: LoginPage@[ip_moego_servera] ->
> LoginPage([ip_moego_servera])
> 17:15:25.28 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <mail1.mycompany.ru>
> 17:15:25.28 5 ROUTER Parser: LoginPage@mail1.mycompany.ru ->
> LoginPage(mail1.mycompany.ru)
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <LoginPage> at <>
> 17:15:25.28 5 ROUTER Parser: LoginPage -> LoginPage()
> 17:15:25.28 2 ROUTER LoginPage@ip_moego_servera accepted by LOCAL as
> <LoginPage> at <mail1.mycompany.ru>
> 17:15:25.28 4 ROUTER Input: _vti_bin@ip_moego_servera
> 17:15:25.28 5 ROUTER Parser: _vti_bin@ip_moego_servera ->
> _vti_bin(ip_moego_servera)
> 17:15:25.28 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <[ip_moego_servera]>
> 17:15:25.28 5 ROUTER Parser: _vti_bin@[ip_moego_servera] ->
> _vti_bin([ip_moego_servera])
> 17:15:25.28 4 ROUTER IP address [ip_moego_servera] converted to local domain
> 'mail1.mycompany.ru'
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <_vti_bin> at
> <mail1.mycompany.ru>
> 17:15:25.28 5 ROUTER Parser: _vti_bin@mail1.mycompany.ru ->
> _vti_bin(mail1.mycompany.ru)
> 17:15:25.28 4 ROUTER rerouted with SYSTEM to <_vti_bin> at <>
> 17:15:25.28 5 ROUTER Parser: _vti_bin -> _vti_bin()
> 17:15:25.28 1 ROUTER _vti_bin@ip_moego_servera rejected by SYSTEM: Error
> Code=unknown user account
> 17:15:25.28 2 HTTPU-00143([216.239.244.98]) Failure.wssp retrieved
> 17:15:25.94 4 ROUTER Input: LoginPage@ip_moego_servera
> 17:15:25.94 5 ROUTER Parser: LoginPage@ip_moego_servera ->
> LoginPage(ip_moego_servera)
> 17:15:25.94 4 ROUTER IP address [ip_moego_servera] converted to cannonical
> form [ip_moego_servera]
> 17:15:25.94 4 ROUTER rerouted with SYSTEM to <LoginPage> at
> <[ip_moego_servera]>
>
>
>
> ##################################################################
> Вы получили это сообщение потому, что подписаны на список рассылки
> <CGatePro@mx.ru>.
>
> Чтобы отписаться, отправьте сообщение на адрес <CGatePro-off@mx.ru>
> Чтобы переключиться в режим дайджеста - mailto:<CGatePro-digest@mx.ru>
> Чтобы переключиться в индексный режим - mailto:<CGatePro-index@mx.ru>
> Для административных запросов адрес <CGatePro-request@mx.ru>
>
>
>
>

-- 

Roman