Good Day, Sorry if this is a bit off-topic ... I've setup a "LogWatch" utility that scans my server logs each day and returns a summary of activity, which is useful to pinpoint any malicious server scan activities. Today's LogWatch results contained a blast of Identd Lookups (see below) which I have not seen before. My first thought was that my mail server was being used as a spam relay, but I've set the "Relay by IP" field in LinuxConf to relay mail from my win98 workstation ONLY. I've looked for more info on identd but am still unclear what these Lookups might mean. Any thoughts are appreciated... Identd Lookups: Host: sun.readmore.com (192.77.216.3) - 1 Connection(s). Host: list.nih.gov (165.112.130.6) - 1 Connection(s). Host: grunt.ksu.ksu.edu (129.130.12.17) - 1 Connection(s). Host: listserv.vt.edu (198.82.162.215) - 1 Connection(s). Host: listserv.iol.ie (194.125.2.213) - 1 Connection(s). Host: dns.CCIT.Arizona.EDU (128.196.139.46) - 1 Connection(s). Host: listserv.nd.edu (129.74.250.22) - 1 Connection(s). Host: itssrv1.ucsf.EDU (128.218.95.22) - 1 Connection(s). Host: post.QueensU.CA (130.15.126.6) - 1 Connection(s). Host: suntan.ccs.yorku.ca (130.63.236.89) - 1 Connection(s). Host: hermes.circ.gwu.edu (128.164.127.253) - 1 Connection(s). Host: testinfo.cs.uoguelph.ca (131.104.96.98) - 1 Connection(s). Host: post2.fast.net (198.69.204.22) - 1 Connection(s). Host: anderson.acpub.duke.edu (152.3.233.72) - 1 Connection(s). Host: grover.ctwonline.com (206.41.29.13) - 1 Connection(s). Host: hiroshima.american.edu (147.9.1.18) - 1 Connection(s). Host: ml.grolier.fr (194.158.96.60) - 1 Connection(s). Host: listserv.acsu.buffalo.edu (128.205.7.35) - 1 Connection(s). Host: PIGLET.CC.UIC.EDU (128.248.100.54) - 1 Connection(s). Host: umail.unify.com (204.163.170.2) - 1 Connection(s). Host: listserv.Arizona.EDU (128.196.137.14) - 1 Connection(s). Host: athena.csdco.com (198.80.11.1) - 1 Connection(s). Host: hermes.csd.unb.ca (131.202.3.20) - 1 Connection(s). Host: spn4.cnr.it (194.119.192.39) - 1 Connection(s). Host: listserv.heanet.ie (193.1.198.5) - 1 Connection(s). Host: flis.man.torun.pl (158.75.33.142) - 1 Connection(s). Host: grundoon.nrm.se (130.242.24.5) - 1 Connection(s). Host: hermes.ulaval.ca (132.203.250.27) - 1 Connection(s). Host: netspace.org (128.148.157.6) - 1 Connection(s). Host: saluki-mailsmtp.siu.edu (131.230.252.26) - 1 Connection(s). Host: beba.cesnet.cz (194.50.6.2) - 1 Connection(s). Host: cwis-20.WAYNE.EDU (141.217.1.38) - 1 Connection(s). Host: piva.ucs.mun.ca (134.153.2.63) - 1 Connection(s). Host: venus.vcu.edu (128.172.1.43) - 1 Connection(s). Host: heuristic.gse.rmit.edu.au (131.170.69.2) - 1 Connection(s). Host: mail1.auracom.net (165.154.140.21) - 1 Connection(s). Host: chlorine.house.gov (143.231.249.197) - 1 Connection(s). Host: sp08.nerdc.ufl.edu (128.227.175.138) - 1 Connection(s). Host: chico.rediris.es (130.206.1.3) - 1 Connection(s). Host: listserv.tamu.edu (128.194.103.24) - 1 Connection(s). Host: bama.ua.edu (130.160.4.114) - 1 Connection(s). Cheers... Dino ----- Dino Nardini, BSc, Certified Web Master mailto:[EMAIL PROTECTED] Explore Nova Scotia - "Canada's Ocean Playground" http://www.explorenovascotia.com --- You are currently subscribed to linuxconf as: [[email protected]] To unsubscribe, forward this message to [EMAIL PROTECTED]
