You could try this. In your /etc/hosts.deny file
in.ftpd: 64.45.30.177 # block this specific ip address
or
in.ftpd: 64.45.30. # block everyone on this subnet
Also, this looks like someone came in as ftpd8565, is that an account on the
box??
Jason
>
>
> Good morning everyone! Thank you all for the help
> yesterday with my
> hacker attempt. I have (yet another) question.... Does anyone know why I
> have ftp login's in the middle of the night??
> ftp ftpd8565 64.45.30.177 Fri Nov 10 03:51 - 03:53 (00:02)
>
> I disabled the account "ftp" in userconf yesterday to cut down on
> problems, but this one obviously came early this morning... Any
> thoughts? Is there a way to block IPs or such in the allow/deny
> files as
> with telnet?? Any advice would be great! Thanks again everyone!
>
> Fred
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
>
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
