Re: Possible Cracker

2000-09-02 Thread SoloCDM
I went to whois and found the location of the offenders. I had another attack form a different source: ftpd[8877]: getpeername (in.ftpd): Transport endpoint is not connected telenetllc03.erols.com I just added the following line to /etc/hosts.deny. Will it stop any of the attacks? in.telnetd,

Possible Cracker

2000-09-02 Thread SoloCDM
My messages file shows "telnetd[21882]: ttloop: peer died: Invalid or incomplete multibyte or wide character" and my tcpdump file shows the consistent IP outside intruder as 198.79.30.20. What exactly happened? Is my system infected, affected, or what? Note: When you reply to this message, ple