INGRESLOCK - Could it be someone trying to attack
- From: Alan Kong <kkkong@xxxxxxxxxxxxxx>
- Date: Tue, 25 Sep 2007 16:58:53 +0800
Dear Managers,
The following was observed when I ran "snoop" on a Sun sparc workstation
runnning Solaris 8. I was connecting to the work station using ssh from
a PC at that moment:
1 0.00000 137.189.3.6 -> cus12.cuhk.edu.hk INGRESLOCK R port=22
2 0.00006 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22
3 0.32806 137.189.3.6 -> cuees12.cuhk.edu.hk INGRESLOCK R port=22
4 0.53146 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22
.....
194 0.00006 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22 \203/n
\305;=\f\357)?\320=\342z\4\342f\315rJ
I have searched on Googles and some mentioned "INGRESLOCK" indicated
someone tried to hack but it doesn't mean I have been exploited. Could
you please help to confirm that the machine was not exploited.
Thank you.
Regards
Alan
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
- Follow-Ups:
- Re: INGRESLOCK - Could it be someone trying to attack - Summary
- From: Alan Kong
- Re: INGRESLOCK - Could it be someone trying to attack - Summary
- Prev by Date: NFS issue
- Next by Date: Adjustable height trolley for Server Racking ????
- Previous by thread: NFS issue
- Next by thread: Re: INGRESLOCK - Could it be someone trying to attack - Summary
- Index(es):
Relevant Pages
|
|