From owner-freebsd-security Fri Jan 22 06:35:02 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA22915 for freebsd-security-outgoing; Fri, 22 Jan 1999 06:35:02 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from ACC.sim.net.ua ([62.244.20.221]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA22863 for ; Fri, 22 Jan 1999 06:34:44 -0800 (PST) (envelope-from pasha@sim.net.ua) Received: from GW.sim.net.ua (gw [62.244.20.220]) by ACC.sim.net.ua (8.9.2/8.8.4) with SMTP id QAA16479; Fri, 22 Jan 1999 16:32:57 +0200 (EET) Message-ID: <36A88C19.284797A9@sim.net.ua> Date: Fri, 22 Jan 1999 14:32:57 +0000 From: Pavel Narozhniy X-Mailer: Mozilla 3.04 (X11; I; FreeBSD 2.2.8-RELEASE i386) MIME-Version: 1.0 To: "Oles' Hnatkevych" CC: freebsd-security@FreeBSD.ORG Subject: Re: rshd in messages References: <36A86BB1.FE6D238A@uct.kiev.ua> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Oles' Hnatkevych wrote: > > Hello! > > In /var/log/messages I got: > > Jan 22 11:48:43 gw rshd[22105]: connection from 199.174.248.162 on > illegal port 1093 > Jan 22 11:56:19 gw rshd[23778]: connection from on > illegal port 1204 > > What it can be? Someone misspelled IP address? Somebody from 199.174.248.162 scanning TCP ports on your machine. -- Pavel Narozhniy nic-hdl: PN395-RIPE To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message