Mailinglist Archive: opensuse (4165 mails)

< Previous Next >
Re: [SLE] Help - Been Hacked!!
  • From: "Matt Stamm" <suselist@xxxxxxxxx>
  • Date: Wed, 23 Apr 103 08:09:44 PDT
  • Message-id: <200304230809117.SM02380@xxxxxxxxx>
---------- Original Message
----------------------------------
From: Vince <default@xxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 23 Apr 2003 15:52:51 +0100

>On Wednesday 23 April 2003 3:11 pm, Matt Stamm
wrote:
>
>> I also noticed the following interesting
entires
>> in the log files...
>>
>> in the "warn" log...
>>
>> Apr 19 18:32:23 linux kernel: 199.170.68.4 sent
an
>> invalid ICMP error to a broadcast.
>> Apr 19 18:32:24 linux kernel: 199.170.68.4 sent
an
>> invalid ICMP error to a broadcast.
>>
>
>www.samspade.org is a useful portal to all kinds
of look-up resources. For
>example 199.170.68.4 turns up this:
>
>
>UUNET Technologies, Inc. NETBLK-UUCBLK170-173
(NET-199-170-0-0-1)
> 199.170.0.0 -
199.173.255.255
> ShaysNet.COM SHAYSNET-NET (NET-199-170-68-0-1)
> 199.170.68.0 -
199.170.68.255
>
>
>I'm assuming you'd have no legit reason for the
machine going there. It sort
>of looks like you might not be the target and
that your visitor is trying to
>make a long track which is hard to follow, rather
than a short well hidden
>track.
>
>Vince Littler
>
>

Vince,

No, no need to go there. Very interesting, I'll
check it out.

Thanks for you help.
Matt



< Previous Next >