| View previous topic :: View next topic |
| Author |
Message |
ChrisJumper
Advocate
Joined: 12 Mar 2005
Posts: 2403
Location: Germany
|
 Posted: Wed Jun 15, 2022 8:45 pm Post subject: rsync issue? |
 |
|
Hi,
i have strange issues with rsyncd. Its about spoofed Addresses and Connections.
| Code: | Jun 15 00:00:00 xxx rsyncd[6879]: forward name lookup for 42-128.206.104.serverhubrdns.in-addr.arpa failed: Name or service not known
Jun 15 00:00:01 xxx rsyncd[6879]: connect from UNKNOWN (104.206.128.42)
Jun 15 00:00:02 xxx rsyncd[6879]: rsync: [Receiver] safe_read failed to read 1 bytes: Connection reset by peer (104)
Jun 15 00:00:03 xxx rsyncd[6879]: rsync error: error in rsync protocol data stream (code 12) at io.c(279) [Receiver=3.2.4]
Jun 15 00:00:04 xxx rsyncd[6896]: connect from scan071.intrinsec.com (46.105.132.54)
|
Time and Hostname chanced for privacy.
The attack changed my default route, so i lost my internet connection. I disabled rsyncd.. hope this helps.
Version:
| Code: | net-misc/rsync
Verfügbare Versionen: 3.2.3-r5 3.2.4-r1 **9999*l {acl examples iconv ipv6 lz4 ssl stunnel system-zlib verify-sig xattr xxhash zstd PYTHON_SINGLE_TARGET="python3_8 python3_9 python3_10"}
Installierte Versionen: 3.2.4-r1(xx:xx:xx xx.xx.2022)(acl iconv ipv6 ssl xattr -examples -lz4 -stunnel -system-zlib -verify-sig -xxhash -zstd PYTHON_SINGLE_TARGET="python3_9 -python3_8 -python3_10")
Startseite: https://rsync.samba.org/
Beschreibung: File transfer program to keep remote files into sync |
Hate Cyberwar. |
|
| Back to top |
|
 |
eccerr0r
Watchman
Joined: 01 Jul 2004
Posts: 9892
Location: almost Mile High in the USA
|
| Posted: Fri Jun 17, 2022 12:25 pm Post subject: |
|
|
This is typical if the reverse lookup server is set up incorrectly (versus not at all).
Something's very wrong if they can change your default route by just using rsyncd, did they somehow get root or did they commandeer your uplink routers?
_________________
Intel Core i7 2700K/Radeon R7 250/24GB DDR3/256GB SSD
What am I supposed watching? |
|
| Back to top |
|
|
|
Networking & Security
