From owner-freebsd-hackers Tue Mar 19 10:53:10 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id KAA21979 for hackers-outgoing; Tue, 19 Mar 1996 10:53:10 -0800 (PST) Received: from haldjas.folklore.ee (Haldjas.folklore.ee [193.40.6.121]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id KAA21972 for ; Tue, 19 Mar 1996 10:52:55 -0800 (PST) Received: (from narvi@localhost) by haldjas.folklore.ee (8.6.12/8.6.12) id UAA08413; Tue, 19 Mar 1996 20:54:50 +0200 Date: Tue, 19 Mar 1996 20:54:49 +0200 (EET) From: Narvi To: hackers@freebsd.org Subject: System probing? Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk It doesn't most probably belong here, but that's what I found out looking at the output of last: ftp ftp jupiter.zzz.ee Mon Mar 18 16:21 - 16:21 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:21 - 16:21 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:21 - 16:21 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:21 - 16:21 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:20 - 16:20 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:20 - 16:20 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:20 - 16:20 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:20 - 16:20 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:19 - 16:19 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:18 - 16:18 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:17 - 16:17 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:17 - 16:17 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:16 - 16:16 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:15 - 16:15 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:15 - 16:15 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:15 - 16:15 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:14 - 16:14 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:14 - 16:14 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:14 - 16:14 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:13 - 16:13 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:13 - 16:13 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:13 - 16:13 (00:00) ftp ftp jupiter.zzz.ee Mon Mar 18 16:13 - 16:13 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:49 - 17:49 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:48 - 17:48 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:48 - 17:48 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:47 - 17:47 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:47 - 17:47 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:47 - 17:47 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:47 - 17:47 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:47 - 17:47 (00:00) ftp ftp jupiter.zzz.ee Tue Mar 5 17:46 - 17:47 (00:00) It looks damn much as if somebody tryed to break into my system. At the the same time the machine jupiter.zzz.ee is not at all mentioned in the messages* files (in /var/log), that is, no ftp login failures reported (it was running with the -l switch, so the failures should have been reported). As for why this mail? I wanted to ask before starting to complain at them... Sander Eat good food, preserve nature, be nice to all nice people :)