Re: I'd say this is someone trying to find an expolit

[Dan Horth]

on the topic of tracking down what's going on I find the tools at:

http://combat.uxn.com/

to be very useful in finding out who owns a certain IP and who 
they're connected through... and like the best stuff in life they're 
free! :)

there's also useful information on how to follow up attempted and 
successful attacks on your system at:

http://www.cert.org/

if you can't be bothered reading what's there then you should at the 
very least CC any emails reporting an attack or compromise to 
[EMAIL PROTECTED] so they can track the incident...

good luck!

cheers, dan.

At 1:19 PM -0500 29/8/00, Scott Kindley wrote:
<SNIP>
>Aug 29 04:21:19 ns1 in.telnetd[12004]: refused connect from
>63.145.81.31
>
>
>Not one of my IP's. Don't know anybody using any IP on that network.
>Any suggestions o how to handle this? It's my first attempt at being
-- 

        Nitro - 3D Visualisation, Graphics & Animation
                Ph (+61 2) 9810 5177 - Fx (+61 2) 9810 0199
                        http://www.nitro.com.au/



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list