[CentOS] unknown connection

Tue Aug 25 16:31:51 UTC 2009
Manuel Monteiro <Manuel.Monteiro at astro.up.pt>

Yes... dumb question! Sorry.

Forgot that, in lsof, this is a connection from (and not *to*) 119.1.193.205

One more SSH brute force attack.

Thanks,
Manuel

Manuel Monteiro wrote:
>
> Hello,
>
> sshd      3638   root    3u  IPv6  17317       TCP
> pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED)
>
> sshd      3639   sshd    3u  IPv6  17317       TCP
> pc46.astro.up.pt:ssh->119.1.193.205:zephyr-clt (ESTABLISHED)
>
>  >

Looks like an ssh connection from 119.1.193.205 port 2103 (defined as
"zephyr-clt" in /etc/services).

-- 
Bowie
_______________________________________________
CentOS mailing list
CentOS at centos.org
http://lists.centos.org/mailman/listinfo/centos