[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Weird user on my SMTP
- Subject: [cobalt-security] Weird user on my SMTP
- From: "ICDServers" <info@xxxxxxxxxxxxxx>
- Date: Sun, 25 Mar 2001 04:39:06 +0200
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi All,
When I use Netstat -a to see what's happening on my box i keep seeing this
user on my smtp port.
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62702
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62677
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62650
TIME_WAIT
tcp 0 0 128.242.221.53:smtp 213.201.148.18:62623
TIME_WAIT
I have addid his ipnumber to hosts.deny file but nonetheless he keeps
popping up and I cannot
trace him completely as I end up in a 10.10.x.x network. He doesn't seem to
send or receive any data . he's just contantly connected in to my box.
I also cannot find anything in the logs...
Any help anyone ? I don't know what to do about this.
Regards,
Peter Broerse
ICD
info@xxxxxx