Hi All,
When I use Netstat -a to see what's happening on my box i keep seeing this
user on my smtp port.
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62702
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62677
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62650
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62623
TIME_WAIT
I have addid his ipnumber to hosts.deny file but nonetheless he keeps
popping up and I cannot
trace him completely as I end up in a 10.10.x.x network. He doesn't seem to
send or receive any data . he's just contantly connected in to my box.
I also cannot find anything in the logs...
Any help anyone ? I don't know what to do about this.
Regards,
Peter Broerse
ICD
[EMAIL PROTECTED]
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security
