intrusion detection

Craig White plug-discuss@lists.PLUG.phoenix.az.us
Mon, 24 Dec 2001 11:15:26 -0700


Eric wrote:
> 
> Hi,
> 
> My heart began to race when I saw this in one of my logs.  If anyone can
> read this log so as to divine whether this attempted hack was or may have
> been successful, I would love to listen.  I know that this is not the ideal
> place to post this.  Sorry if it offends.
> 
> FWIN,2001/12/22,19:57:38 -8:00 GMT,63.26.74.158:1665,63.137.xx.xx:80,TCP
> (flags:S)
---
portscanned - that's all it indicates

read up on your distro - how to tell if you've been hacked/compromised
if it concerns you.

Craig