so was ähnliches ist mir auch mal passiert
nur in diesem fall hab' ich ihm ein mail geschrieben
die beiden antworten kamen dann wenig später
At 6:26 AM +0800 8/8/01, Alex Dawson wrote:
>>Hi Alex Dawson ,
>>
>>why are you scanning my machine?
>>
>>regards
>>max
>>
>>
>>Date: 07.08.01 Time: 20:36:56 (MET)
>>Unused port blocking has blocked communications. Details: Inbound TCP
>>connection Remote address,local service is (130.95.208.50,printer)
>
>Good question. What is the IP address of the machine that is from?
>And more accurately, how do you know that 130.95.208.50 is my
>machine specifically?
>
>Thanks.
Actually, like a dork I left the standard fingerd running after an
upgrade.. which would explain how you know who's machine it was..
oops.
This is fixed now..
As for the port scan.. looks like the machine has been hacked
somehow, there's a rootkit running on it. Doh. I was going to put a
fresh hard drive in it today anyway, so I guess I'll do a fresh
system install too.
Apologies and thanks for letting me know,
Alex.
--
Alex Dawson
alex@ee.uwa.edu.au
(08) 9380 1587 CSU - Systems Administrator
alex@ee.uwa.edu.au Electrical and Electronic Engineering