Hello WH,
Wednesday, December 22, 1999, 11:05:04 AM, you wrote:
WB> I had been warned on this list some months back
WB> to pay attenttion to attempted TCP connections
WB> from "unknown individuals"
WB> This morning I had:
WB> Dec 22 01:08:12 home portsentry[812]: attackalert: Connect from host:
WB> 1Cust163.tnt1.anchorage.ak.da.uu.net/63.28.217.163 to TCP port: 12345
WB> Dec 22 01:08:12 home portsentry[812]: attackalert: Host 63.28.217.163
WB> has been blocked via wrappers with string: "ALL: 63.28.217.163"
WB> Dec 22 01:08:12 home portsentry[812]: attackalert: Host 63.28.217.163
WB> has been blocked via dropped route using command: "/sbin/route add -host
WB> 63.28.217.163 gw 333.444.555.666"
WB> Okay I looked up in /etc/services and can not find that
WB> port listed?
WB> While I'm at it does this one make any sense to anyone?
WB> Dec 21 22:11:05 home routed[440]: packet from unknown router,
WB> 198.70.230.33
WB> Dec 21 22:11:36 home routed[440]: packet from unknown router,
WB> 198.70.230.33
WB> This has been going on for some time now. I have asked my
WB> ISP about it but after two weeks and several emails I am
WB> about to the "shrug my shoulders stage"
WB> Any help would be appreciated!
WB> William Bouterse
WB> Juneau Alaska
The APC power monitor daemon, apcupsd defaults to this port... Maybe
you have something going on there?
Best regards,
Perry mailto:[EMAIL PROTECTED]
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
