Re: Unusual incoming traffic detected from klecker.debian.org and source.rfc822.org
On Wednesday, September 14, 2005 9:51 AM, Mathieu JANIN
> I detected some unexpected incoming traffic from klecker.debian.org
> (ports TCP 4672, 4668) , and source.rfc822.org (port TCP 1794), all
> coming from port 80 at 12:17 yesterday.
> I was updating my system at that time, but klecker.debian.org is not
> in my sources (or perharps with an other name).
What does your sources.list look like? klecker == security.debian.org and
source.rfc822.org is a Debian mirror (c.f. http://source.rfc822.org/debian/
and the ftp equivalent).