intrusion detection
Craig White
plug-discuss@lists.PLUG.phoenix.az.us
Mon, 24 Dec 2001 11:15:26 -0700
Eric wrote:
>
> Hi,
>
> My heart began to race when I saw this in one of my logs. If anyone can
> read this log so as to divine whether this attempted hack was or may have
> been successful, I would love to listen. I know that this is not the ideal
> place to post this. Sorry if it offends.
>
> FWIN,2001/12/22,19:57:38 -8:00 GMT,63.26.74.158:1665,63.137.xx.xx:80,TCP
> (flags:S)
---
portscanned - that's all it indicates
read up on your distro - how to tell if you've been hacked/compromised
if it concerns you.
Craig