i have noticed quite a few attempts to FTP to my machine.  which is very
unusual.
i'd be willing to compare logs.

matthew

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of bill
Sent: Wednesday, November 29, 2000 11:25 AM
To: [EMAIL PROTECTED]
Subject: [expert] Security


Since re-subscribing to this list I have noticed
an increase of un-authorized attempts to access my
main Linux Server. It may be only a coincedence,
however perhaps sharing a few of our log files
could be useful to see if there is a pattern.
Not everything which would overwhelm this already
VERY busy List but basic things like:


Nov: : connect from 149.156.100.100  to dump() : request from unauthorized
host

(That one is a denfinite No-No)

Here's another(why I use proftpd)

Nov 28 18:35:39 home in.proftpd
refused connect from cm803646-a ftwrth1.tx.home.com(24.4.12.149)

xtraceroute can track the footsteps of some of these attempts.
routing through xxx.att.net seems popular.

Anyone else seen these numbers

Casual "sniffs" now and then are understandable curiosity on the
part of some, however where does the "line get crossed"?
If an acquaintance asked to stop by my house to look around both
inside and outside I probably would be okay with that. If a stranger
drives by my house and gives a casual glance thats one thing, but
if they come up to the doors and windows to peak in and check the
locks ...?

William Bouterse
Talkeetna




Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.

Reply via email to