[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] /var/log/secure
- Subject: Re: [cobalt-users] /var/log/secure
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Tue Feb 20 17:50:03 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
"Filiberto Ricci" <filiberto@xxxxxxxxx> wrote
> Hi all!
>
> In my /var/log/secure i find these lines:
>
> Feb 20 07:04:41 www imapd[9293]: connect from 209.196.58.2
> Feb 20 07:04:41 www in.telnetd[9294]: connect from 209.196.58.2
> Feb 20 07:04:41 www in.telnetd[9295]: connect from 209.196.58.2
>
> If I understood good dome 209..... was connecting to telnet.
> It should be an United States IP and I don't have any customer there.
>
That guy is a bandit! Check your server and put the IP in /etc/hosts.deny!
Gerald