netstat -a or try lsof -i
Regards
--------
Muhammad Faisal Rauf Danka
Head of GemSEC / Chief Technology Officer
Gem Internet Services (Pvt) Ltd.
web: www.gem.net.pk
Key Id: 0x784B0202
Key Fingerprint: 6F8C EDCF 6C6E 06A5 48D7 6A20 C592 484B
784B 0202
--- message from "Info" <[EMAIL PROTECTED]> attached:
_____________________________________________________________
---------------------------
[ATTITUDEX.COM]
http://www.attitudex.com/
---------------------------
_____________________________________________________________
Select your own custom email address for FREE! Get [EMAIL PROTECTED] w/No Ads, 6MB,
POP & more! http://www.everyone.net/selectmail?campaign=tag
--- Begin Message ---
|
I encountered a problem with rlogin.
Logwatch indicate there was a secured login from
this ip
---------------- Connections (secure-log) Begin -------------------
Connections:
Service
login:
217.97.59.98: 1 Time(s)
And
/var/log/messages shows me that this break in via rlogin
Dec 27 04:55:52 ahead xinetd[13139]: Bad line
received from identity server at 217.97.59.98: 3243 , 513 : ERROR :
UNKNOWN-ERROR
Dec 27 04:55:52 ahead rlogind[13139]: Connection from
217.97.59.98 on illegal port
I had disabled rlogin now, do i have to restart the
box and how do i test if rlogin is disabled?
regards
|
--- End Message ---
