Date: Fri, 17 Jan 2003 09:54:33 -0500 From: "JoeB" <barbish@a1poweruser.com> To: "Jim Freeze" <jim@freeze.org>, "FreeBSD Questions" <FreeBSD-questions@FreeBSD.org> Subject: RE: Possible attack? Message-ID: <MIEPLLIBMLEEABPDBIEGOENDDDAA.barbish@a1poweruser.com> In-Reply-To: <20030117093453.A9304@freeze.org>
index | next in thread | previous in thread | raw e-mail
Just some body knocking at your front door.
What this means is you have ports 20 & 21 open
and your were port scanned.
You have to add some rules to your firewall.
-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jim Freeze
Sent: Friday, January 17, 2003 9:35 AM
To: FreeBSD Questions
Subject: Possible attack?
Hi:
I got an interesting log report today.
Has anyone seen such messages lately?
Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry
64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
pD9E60C0F.dip.t-dialin.net
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
Content-Disposition header due to
field size (length = 22) (possible attack)
--
Jim Freeze
----------
"It's not Camelot, but it's not Cleveland, either."
-- Kevin White, mayor of Boston
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MIEPLLIBMLEEABPDBIEGOENDDDAA.barbish>