Date: Fri, 22 Jan 1999 11:54:39 -0700 (MST) From: "David G. Andersen" <danderse@cs.utah.edu> To: "Oles' Hnatkevych" <gnut@uct.kiev.ua> Cc: freebsd-security@FreeBSD.ORG Subject: Re: rshd in messages Message-ID: <13992.51540.10896.239954@torrey.cs.utah.edu> In-Reply-To: Oles' Hnatkevych's message of Fri, January 22 1999 <36A86BB1.FE6D238A@uct.kiev.ua> References: <36A86BB1.FE6D238A@uct.kiev.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
It's typically a sign that someone is port scanning your machine. (for further information, do a web search on "nmap" or "strobe"). -Dave Lo and Behold, Oles' Hnatkevych said: > Hello! > > > In /var/log/messages I got: > > Jan 22 11:48:43 gw rshd[22105]: connection from 199.174.248.162 on > illegal port 1093 > Jan 22 11:56:19 gw rshd[23778]: connection from 199.174.248.162 on > illegal port 1204 > > What it can be? Someone misspelled IP address? > > -- > Best wishes, > > Oles Hnatkevych, http://gnut.kiev.ua > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -- work: danderse@cs.utah.edu me: angio@pobox.com University of Utah http://www.angio.net/ Computer Science - Flux Research Group To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?13992.51540.10896.239954>