[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] Qube 3 - Web Usage - Most Active Requesters
- Subject: [cobalt-security] Qube 3 - Web Usage - Most Active Requesters
- From: "Chuck Lewis" <clewis@xxxxxxxxxx>
- Date: Tue, 13 May 2003 16:33:05 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi folks,
Was reviewing the "Web Usage - Most Active Requesters" info on our Qube 3
(had to rebuild it a week ago and the primary drive in the RAID set died.
Still not sure if we got hacked or not. Telnet is now shutdown as is
SAMBA.).
Anyway, here is a sampling:
Requestor Requests
Referred From
Localhost 574
-
Unknown -- 172.16.10.96 9 -
198-1.dedicado.com.uy 5 1264
Unknown -- 172.16.10.21 3 -
c-67-162-255-218.client.comcast.net 2
-
c-67-160-94-99.client.comcast.net 2
-
cs671021-89.houston.rr.com 2
-
dsl092-108-024.nyc2.dsl.speakeasy.net 2 -
dhcp065-029-091-247.indy.rr.com 2 -
fsn8.frontstreetnetworks.com 2
-
moe.keel.net 2
-
dialup-67.74.41.241.Dial1.SanFrancisco1.Level3.net 1 1264
dialup-67.73.177.103.Dial1.Chicago1.Level3.net 1 1264
Toronto-HSE-ppp3740244.sympatico.ca 1 1264
Toronto-HSE-ppp3773032.sympatico.ca 1 1264
We do NO web hosting on this - only company email.
Do I have something to be worried about ?
Thanks !
Chuck