Hi all,
I was going through a few servers tonight and came across this in
/var/log/messages. This particular server functions mainly as our
primary webserver. Its running FreeBSD 4.8-RELEASE. I decided to take
a closer look to see what was generating these entries by loading up
trafshow.
Jun 21 21:50:55 mx1 /kernel: Limiting closed port RST response from 230
to 200 packets per second
Jun 21 21:51:23 mx1 /kernel: Limiting closed port RST response from 222
to 200 packets per second
Jun 21 21:53:02 mx1 /kernel: Limiting closed port RST response from 230
to 200 packets per
In the last episode (Jun 21), Troy G. said:
I was going through a few servers tonight and came across this in
/var/log/messages. This particular server functions mainly as our
primary webserver. Its running FreeBSD 4.8-RELEASE. I decided to
take a closer look to see what was generating
Dear/Beste Bill,
Friday, January 17, 2003, 4:01:43 PM, you wrote:
I've seen the anonymous FTP denied off and on. I think that some folks
just randomly attempt to connect to any FTP server they find in the
hopes that there's cool stuff there.
Or in the hopes that the can place some cool
Alex wrote:
Dear/Beste Bill,
Friday, January 17, 2003, 4:01:43 PM, you wrote:
I've seen the anonymous FTP denied off and on. I think that
some folks just randomly attempt to connect to any FTP server
they find in the hopes that there's cool stuff there.
Or in the hopes that the can
FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
pD9E60C0F.dip.t-dialin.net
Jan
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP
:35 AM
To: FreeBSD Questions
Subject: Possible attack?
Hi:
I got an interesting log report today.
Has anyone seen such messages lately?
Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry
64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t
]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
(length = 25) (possible attack)
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
Content-Disposition header due to
field size (length = 22) (possible attack)
I've seen
11 matches
Mail list logo