more hack attempts?

dave d.eason at home.com
Mon Jun 25 10:57:32 PDT 2001


Found these in my logs
 
 
Jun 24 10:30:48 localhost portmap[14006]: connect from 210.90.149.17 to
getport(status): request from unauthorized host
 
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.64: Source Route
Failed.   
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.69: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.76: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.73: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.65: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.66: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.67: Source Route
Failed.   
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.68: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.70: Source Route
Failed.
Jun 24 10:51:43 localhost kernel: ICMP: 193.247.102.82: Source Route
Failed.
 
Jun 24 12:56:48 localhost kernel: NET: 22 messages suppressed.
Jun 24 12:56:48 localhost kernel: neighbour table overflow
 
Jun 24 14:48:16 localhost kernel: IP_MASQ:reverse ICMP: failed checksum
from 217.58.2.202!
 
Jun 24 16:31:07 localhost portmap[21537]: connect from 204.144.161.36 to
getport(status): request from unautho$
Jun 24 16:31:07 localhost portmap[21538]: connect from 204.144.161.36 to
getport(status): request from unautho$
Jun 24 16:31:08 localhost portmap[21539]: connect from 204.144.161.36 to
getport(status): request from unautho$
Jun 24 16:31:08 localhost portmap[21540]: connect from 204.144.161.36 to
getport(status): request from unautho$
 
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.96: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.97: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.98: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.101: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.102: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.105: Source Route
Failed.   
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.103: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.108: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.100: Source Route
Failed.
Jun 24 19:05:59 localhost kernel: ICMP: 195.61.105.99: Source Route
Failed.
 
 
I got email from someone saying my ip was in their "firewall" last
night, just a windows user but apparently whatever those logs are
showing someone used the box again for an attack.   Any
suggestions/ideas?
 
 
-Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freesoftwarehawaii.org/pipermail/luau-freesoftwarehawaii.org/attachments/20010625/51b9d7bb/attachment-0001.htm>


More information about the LUAU mailing list