On Thu, 20 Mar 2003 11:53:32 -0800 Todd Lyons <[EMAIL PROTECTED]> wrote:
> Skippi wrote on Wed, Mar 19, 2003 at 05:57:40PM -0700 : > > Greetings all. I am running a MDK 7.2 box and get the following > > message every so often at tty1 - 6: failure for servers telnet > > 1046406154 localhost Can anyone point me in the direct of the problem? > > This box is not a server or any such thing, simply a normal single > > user desktop. > > Five dollars says your box is cracked. Are you running a telnet server? > If not, then twenty dollars says your box is cracked. > > Blue skies... Todd The large number is just an attempt to obfuscate the IP address... Here's a quick trick to determine the IP address** from the above... 1. Enter the number (1046406154) into kcalc (or any other dec/hex calculator) 2. Convert to hex (one click :) ==> 3E5EE40A 3. Separate into 4 octets (bytes) ==> 3E.5E.E4.0A 4. Convert each octet back to decimal ==> 62.94.228.10 ** this address may be the attacker phoning home *or* a new target (your machine is used as a jumping off point).
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
