On Fri, 26 Mar 1999, Andrei Ivanov wrote: : Evening all. : I've found this entry in netstat output: : tcp 57 1 Mizzou-AS7-21.mis:10802 pavlov.midco.net:ftp LAST_ACK : : Thing is, I don't remember connecting to pavlov.midco.net : There are no entries in syslog with name pavlov, or xferlog, for that : matter. Any ideas where else I can look if my system has been accessed by : an outsider?
I'll bet you connected to http.us.debian.org, though [EMAIL PROTECTED]:~ $ nslookup Default Server: bohr.midco.net Address: 24.220.0.10 > http.us.debian.org Server: bohr.midco.net Address: 24.220.0.10 Non-authoritative answer: Name: http.us.debian.org Addresses: 206.187.92.15, 209.197.224.62, 207.69.194.216, 141.213.4.21 208.146.80.105 > pavlov Server: bohr.midco.net Address: 24.220.0.10 Name: pavlov.midco.net Address: 208.146.80.105 -- Nathan Norman MidcoNet 410 South Phillips Avenue Sioux Falls, SD mailto:[EMAIL PROTECTED] http://www.midco.net finger [EMAIL PROTECTED] for PGP Key: (0xA33B86E9)