more questions

Tani Hosokawa (unknown@riverstyx.net)
Sun, 13 Jun 1999 04:08:36 -0700 (PDT)

With those boxes that keep crashing, I know for a fact that there are a
couple kiddies scanning it and poking at it. They've already tried all
the common accounts, port scanned, SYN flooded, attempted to do FTP PASV
scanning, and half a dozen other stupid exploits. I'm wondering if
there's some new exploit that I haven't seen around yet.

Jun 12 14:28:44 mars5 kernel: tcp_fin: Impossible, sk->state=7
Jun 12 14:28:45 mars5 kernel: tcp_fin: Impossible, sk->state=7

Do those look like anything important? I only seem them on these two
servers. There are a couple other messages that seem to come up every
couple days as well (but only recently).

---
tani hosokawa
river styx internet






-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/