[Firestarter-user] Hackt?
Brought to you by:
majix
Menu
▾
▴
[Firestarter-user] Hackt?
|
From: <tho...@un...> - 2003-04-29 07:26:58
|
Hello, I recently found these hits on my Firestarter (0.8.1) screen: 33044 62.245.190.21 unknown Apr 27 12:32:42 33044 62.245.190.21 unknown Apr 27 12:33:05 23 80.134.44.223 telnet Apr 27 14:40:33 22 80.134.44.223 ssh Apr 27 14:40:33 19 80.134.44.223 chargen Apr 27 14:40:33 11 80.134.44.223 systat Apr 27 14:40:33 7 80.134.44.223 echo Apr 27 14:40:33 88 80.134.44.223 kerberos Apr 27 14:40:34 81 80.134.44.223 unknown Apr 27 14:40:34 79 80.134.44.223 finger Apr 27 14:40:34 66 80.134.44.223 unknown Apr 27 14:40:34 43 80.134.44.223 whois Apr 27 14:40:34 42 80.134.44.223 nameserver Apr 27 14:40:34 514 80.134.44.223 shell Apr 27 14:40:35 513 80.134.44.223 login Apr 27 14:40:35 443 80.134.44.223 https Apr 27 14:40:35 407 80.134.44.223 unknown Apr 27 14:40:35 396 80.134.44.223 unknown Apr 27 14:40:35 389 80.134.44.223 ldap Apr 27 14:40:35 256 80.134.44.223 unknown Apr 27 14:40:35 179 80.134.44.223 bgp Apr 27 14:40:35 143 80.134.44.223 imap2 Apr 27 14:40:35 118 80.134.44.223 unknown Apr 27 14:40:35 The first though came to my mind was that I've been hacked, so cut the connection and fetch the newest chkrootkit to test my system, without finding sniffer.logs or similiar things! Since I am not an expert in networking issues I am not quite sure if this is right? So I decided to ask you to give me your opinion of this incident? Even if I am not hacked, it semms to me like being attacked, isn't it? cheers Thomas |