webmaster wrote:
Hi all, Returning from a week long job I have found events logged like that below. Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Nov 29 05:31:33 mand -- MARK --
Nov 29 05:42:33 mand sendmail[16558]: NOQUEUE: Null connection from IDENT:root@ns1.excitesystems.com [209.25.174.2]
Nov 29 05:42:33 mand popper[16559]: refused connect from root@209.25.174.2
Nov 29 05:42:33 mand in.telnetd[16560]: refused connect from root@209.25.174.2
Nov 29 05:42:34 mand in.telnetd[16561]: refused connect from root@209.25.174.2
Would anyone help me understatnd these - especially that of sendmail?
Someone (root@ns1.excitesystems.com) has scanned Your box using a portscanner. -- _, Regards, (_ ,_)ven Hansen. +-------------------------------------------------------+ | Sven Hansen Celo Communications GmbH | | Dipl.-Chem. Weissenfelser Strasse 46a | | Senior Software Engineer D-06217 Merseburg | | mailto:sh@celocom.de http://www.celocom.de | | Phone: +49 (0)3461/3318-24 Fax: +49 (0)3461/415072 | +-------------------------------------------------------+ Unix _IS_ user friendly - it's just selective about who its friends are !