Re: I'd say this is someone trying to find an expolit

[John Aldrich]

On Tue, 29 Aug 2000, Vidiot wrote:
> >Not one of my IP's. Don't know anybody using any IP on that network.
> >Any suggestions o how to handle this? It's my first attempt at being
> >hacked. I have him blocked with wrappers after a telnet attempt a few
> >days ago that I thought looked funny. So for now I think I'm ok. I have
> >checked me logs and verified nothing has changed on the system. So
> >entry wasn't made. Still the attempt is bugging me.
> >Scott Kindley
> 
> Well, a nslookup doesn't reveal a name for the system.  I know there is a
> way to determine which ISP owns the class C block, or even the class B block.
> But I don't remember what it is.
> 
> Also:
> 
>       telnet 63.145.81.31
>       Trying 63.145.81.31...
>       Connected to 63.145.81.31.
>       Escape character is '^]'.
>  
>       Red Hat Linux release 6.2 (Zoot)
>       Kernel 2.2.14-5.0smp on a 2-processor i686
>       login: 
> 
> So, it is an active Linux box.  Interesting.
> 
whois <IP Address>@whois.arin.net
        John



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list