From: "Trevor Warren" <[EMAIL PROTECTED]> > **Unmatched Entries** > Jul 1 15:40:59 paranux2 sshd[22177]: Could not reverse > map address 61.11.13.154. > Jul 1 15:41:17 paranux2 sshd[22177]: Failed password > for ROOT from 61.11.13.154 port 62560 > Jul 1 15:41:24 paranux2 sshd[22177]: Accepted password > for ROOT from 61.11.13.154 port 62560 > [snip] > check the above line....... > Can some 1 tell me whose ip address is ( > 61.11.13.154) this.....????
> I tried reverse lookin up this IP...but to no avail. > No1 xcept me and 1 other admin knowz the passwd. This > may b a false alarm........but itz a serious 1. thaths@www:[7] ~ $ telnet 61.11.13.154 80 Trying 61.11.13.154... GEConnected to 61.11.13.154. Escape character is '^]'. GET / HTTP/1.0 HTTP/1.1 200 OK Server: Microsoft-IIS/5.0 Date: Wed, 03 Jul 2002 20:37:07 GMT Connection: Keep-Alive Content-Length: 1270 Content-Type: text/html Set-Cookie: ASPSESSIONIDQGQQGVDQ=BPIPDPJCOKOAABKJCEMDJACL; path=/ Cache-control: private Aieeee! Looks like that server is running IIS. They don't even have a decent under construction page. Do you usually have users who connect to your machine from windos machines? Also, why do you allow people to ssh in as root? Thaths ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek No, I will not fix your computer. http://thinkgeek.com/sf _______________________________________________ linux-india-help mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/linux-india-help
