Re: netstat entry
On Fri, 26 Mar 1999, Andrei Ivanov wrote:
: Evening all.
: I've found this entry in netstat output:
: tcp 57 1 Mizzou-AS7-21.mis:10802 pavlov.midco.net:ftp LAST_ACK
:
: Thing is, I don't remember connecting to pavlov.midco.net
: There are no entries in syslog with name pavlov, or xferlog, for that
: matter. Any ideas where else I can look if my system has been accessed by
: an outsider?
I'll bet you connected to http.us.debian.org, though
nnorman@brahe:~ $ nslookup
Default Server: bohr.midco.net
Address: 24.220.0.10
> http.us.debian.org
Server: bohr.midco.net
Address: 24.220.0.10
Non-authoritative answer:
Name: http.us.debian.org
Addresses: 206.187.92.15, 209.197.224.62, 207.69.194.216, 141.213.4.21
208.146.80.105
> pavlov
Server: bohr.midco.net
Address: 24.220.0.10
Name: pavlov.midco.net
Address: 208.146.80.105
--
Nathan Norman
MidcoNet 410 South Phillips Avenue Sioux Falls, SD
mailto:finn@midco.net http://www.midco.net
finger finn@home.midco.net for PGP Key: (0xA33B86E9)
Reply to: