RE: [cobalt-users] possible ftp attack??

["Michael Tubbe" <mtubbe@xxxxxxxxxxx>]

Thanks for the quick response, Sim Ayers.

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Sim Ayers
> Sent: Saturday, October 20, 2001 10:58 PM
>
> It's probably a Windows worm or virus
>
> /var/log/messages is filled with the same FTP attack.
>
> use this to see a list of unauthorized access attempts
>
> grep "anonymous" /var/log/messages

When I do this, I find a bunch of lines that are listed with "anonymous" and
"localhost[127.0.0.1]"  Anonymous FTP is not enabled on any site on my RaQ3.
Does this mean that somehow my security has been comprimised?

--
Michael Tubbe