Security Incidents mailing list archives

Network Probing


From: Marcelo Bartsch <bartschm () PSI COM>
Date: Mon, 28 Aug 2000 09:56:39 -0400

Hello!
        today i found a network probe against one of our machines, the machine
from where the probe comes is 200.29.7.67 which points to
narya.amerikanclaris.cl, this is the /var/log/secure snip:

Aug 28 09:37:35 WS3 in.telnetd[30876]: refused connect from 200.29.7.67
Aug 28 09:37:35 WS3 in.rshd[30877]: refused connect from 200.29.7.67
Aug 28 09:37:36 WS3 in.ftpd[30879]: refused connect from 200.29.7.67
Aug 28 09:37:37 WS3 in.rlogind[30882]: refused connect from 200.29.7.67

the machine scanned is my personal WS, wich is running ipchains except
for those ports showed up.

Regards!
--
     Marcelo Bartsch R.
      bartschm () psi com
        PSINet Chile
--"Kein Mitleid Für MicroSoft"--
Telefono Directo : +56-2-3979043
Numero de Fax    : +56-2-3979090


Current thread: