[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Portsentry Logs.
- Subject: [cobalt-users] Portsentry Logs.
- From: Jim Hagani <jhagani@xxxxxxxxxxx>
- Date: Sat Feb 24 02:36:01 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
Hi all,
My RAQ3i was hacked yesterday, after restoring OS, I installed Portsentry,
and Since then I am getting this huge log with these 3 IP addresses only,
trying to connect to port 67. The log shows an attempt every 2-10 seconds.
These are not my IPs. Is this a hacker? What should I do?
Thanks for any response.
Jim Hagani
Feb 20 05:56:27 ns portsentry[1086]: attackalert: Connect from host:
ws001.pegasuscomputers.net/64.65.18.10 to UDP port: 67
Feb 20 05:56:27 ns portsentry[1086]: attackalert: Host: 64.65.18.10 is
already blocked. Ignoring
Feb 20 05:56:37 ns portsentry[1086]: attackalert: Connect from host:
mail.pegasuscomputers.net/64.65.18.114 to UDP port: 67
Feb 20 05:56:37 ns portsentry[1086]: attackalert: Host: 64.65.18.114 is
already blocked. Ignoring