Re: What kind of attack is this?
On Mon, Jun 25, 2001 at 09:03:04AM -0400, Eugene Tyurin wrote:
>
> Hello,
>
> I've got 868 lines in my syslog with strange binary data (see attached
> file) that go on for about 17 minutes. This looks very strange, and I
> am not running any services open to the outside world (except through
> portsentry). Any ideas/suggestions?
Looks like an attempted buffer overflow to me. If you're sure that you
don't have an externally available services then you can probably just
ignore it. Could be worth sending mail to abuse@their.isp, if you have
their IP number logged and want to follow it up.
Reply to: