[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] possible ftp attack??
- Subject: Re: [cobalt-users] possible ftp attack??
- From: "Gerald Waugh" <gerald@xxxxxxxxx>
- Date: Sun Oct 21 10:05:17 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> > It's probably a Windows worm or virus
> > /var/log/messages is filled with the same FTP attack.
> > use this to see a list of unauthorized access attempts
> > grep "anonymous" /var/log/messages
>
> When I do this, I find a bunch of lines that are listed with "anonymous" and
> "localhost[127.0.0.1]" Anonymous FTP is not enabled on any site on my RaQ3.
> Does this mean that somehow my security has been comprimised?
>
Since I updated my RaQ3, I get many of these. For some reason swatch
(Active_Monitor)
attempts an anonymous connection. So these may be from that source.
This does not happen on my Qube3, RaQ2 or RaQ4's.
Gerald