[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: netstat entry



On Fri, 26 Mar 1999, Andrei Ivanov wrote:

 : Evening all.
 : I've found this entry in netstat output:
 : tcp       57      1 Mizzou-AS7-21.mis:10802 pavlov.midco.net:ftp LAST_ACK
 : 
 : Thing is, I don't remember connecting to pavlov.midco.net
 : There are no entries in syslog with name pavlov, or xferlog, for that
 : matter. Any ideas where else I can look if my system has been accessed by
 : an outsider?

I'll bet you connected to http.us.debian.org, though

nnorman@brahe:~ $ nslookup
Default Server:  bohr.midco.net
Address:  24.220.0.10

> http.us.debian.org
Server:  bohr.midco.net
Address:  24.220.0.10

Non-authoritative answer:
Name:    http.us.debian.org
Addresses:  206.187.92.15, 209.197.224.62, 207.69.194.216, 141.213.4.21
          208.146.80.105

> pavlov
Server:  bohr.midco.net
Address:  24.220.0.10

Name:    pavlov.midco.net
Address:  208.146.80.105

--
Nathan Norman
MidcoNet  410 South Phillips Avenue  Sioux Falls, SD
mailto:finn@midco.net           http://www.midco.net
finger finn@home.midco.net for PGP Key: (0xA33B86E9)



Reply to: