Re: Report on last cmd
Hi,
Am 19:03 2002-10-04 +0800 hat Glen Tapley geschrieben:
>
>Hello
>
>I have been having a lot of trouble with my sendmail setup, someone is
using my system. I have found that when I run the last cmd, I find a
lot of strange entries such as
???
>ftp ftp p50852BD8.dip.t- Sun Oct 6 03:57 - 03:57 (00:00)
>ftp ftp p508ECDDA.dip.t- Sun Oct 6 03:37 - 03:37 (00:00)
It seems anyone from a dial-in account from the german telekom like
p50852BD8.dip.t-online.de
>ftp ftp 212.171.38.1 Sat Oct 5 23:16 - 23:16 (00:00)
>ftp ftp 210.23.10.25 Sat Oct 5 18:40 - 18:40 (00:00)
these are only 'ftp' (anonymous) tries... Because the access-time is
under one minute may be someone which is looking for anything on your
IP.
Do you habe a fixed IPÜ or dynamic ???
As I had a Internet-connection I had enabled ftp and anonymous and
uses the Dynamic-DNS-Service from tab.net
>Can anyone tell me what these are, are they the result of programs
accessing my TCP/IP addresses?
maybe done
>Tx in advance.
>
>glt
Michelle
--
Registered Linux-User #280138 with the Linux Counter, http://counter.li.org.
Reply to: