Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Apr 2005 10:56:10 +0200
From:      Clement Twine <clem.twain@gmail.com>
To:        sergei@gnezdov.net
Cc:        freebsd-questions@freebsd.org
Subject:   Re: How to interpret ipfw log?
Message-ID:  <425E302A.6050008@gmail.com>
In-Reply-To: <slrnd5rqqj.1vpk.use-reply-to@gnezdov.net>
References:  <MIEPLLIBMLEEABPDBIEGKEBDHEAA.bob@a1poweruser.com> <1113426014.91701.18.camel@red.nativenerds.com> <slrnd5rqqj.1vpk.use-reply-to@gnezdov.net>

next in thread | previous in thread | raw e-mail | index | archive | help
[...]

>>> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP
>>> 192.168.0.200:64970 65.87.165.45:281 out via tx0 Apr 11
>>> 04:27:05 name kernel: ipfw: 2500 Deny TCP
>>> 192.168.0.200:64115 65.87.165.45:106 out via tx0 Apr 11
>>> 04:27:05 name kernel: ipfw: 2500 Deny TCP
>>> 192.168.0.200:62007 65.87.165.45:284 out via tx0
> 
>> looks like nmap ;)
> 
> I don't remember running nmap.  What are the chances that
> machine is compromised?

zero chances - your firewall denied the intruder anyway :-)

clem.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?425E302A.6050008>