Say hi to Mike for me :-)
this is the same box with the ps problems, right? Put the latest
checkrootkit on a write-protected floppy and run it on there, I think
you might have a visitor.
On Mon, 2003-09-01 at 18:19, dfox wrote:
> Well, I just received a heads up from my isp provider -- seems that there
> has been some naughtiness (?) going on here.. dunno what to do to fix it.
>
> It seems there have been some pings/icmp activity from my system to some
> other system on the local tsoft network. I can't find anything in my logs
> regarding this activity.
>
>
> -- > Aug 7 20:18:10 ns snort[26215]: [1:469:1] ICMP PING NMAP =
> > [Classification: Attempted Information Leak] [Priori
> > ty: 2]: {ICMP} 198.144.206.157 -> 198.144.206.xx
> >
> > Aug 30 02:11:08 ns snort[15127]: [1:469:1] ICMP PING NMAP =
> > [Classification: Attempted Information Leak] [Priori
> > ty: 2]: {ICMP} 198.144.206.157 -> 198.144.206.xx> Sep 1 12:21:10 ns
> snort[15127]: [1:469:1] ICMP PING NMAP =
> > [Classification: Attempted Information Leak] [Priori
> > ty: 2]: {ICMP} 198.144.206.157 -> 198.144.206.xx
> >
> > Sep 1 12:36:17 ns snort[15127]: [1:469:1] ICMP PING NMAP =
> > [Classification: Attempted Information Leak] [Priori
> > ty: 2]: {ICMP} 198.144.206.157 -> 198.144.206.xx
>
> Notice that there's been some activity today...
>
>
>
>
> ------------------------------------------------------------------------
> David E. Fox Thanks for letting me
> [EMAIL PROTECTED] change magnetic patterns
> [EMAIL PROTECTED] on your hard disk.
> -----------------------------------------------------------------------
>
>
>
> ______________________________________________________________________
>
> Want to buy your Pack or Services from MandrakeSoft?
> Go to http://www.mandrakestore.com
--
Jack Coates
Monkeynoodle: A Scientific Venture...
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
