With those boxes that keep crashing, I know for a fact that there are a
couple kiddies scanning it and poking at it.  They've already tried all
the common accounts, port scanned, SYN flooded, attempted to do FTP PASV
scanning, and half a dozen other stupid exploits.  I'm wondering if
there's some new exploit that I haven't seen around yet.

Jun 12 14:28:44 mars5 kernel: tcp_fin: Impossible, sk->state=7
Jun 12 14:28:45 mars5 kernel: tcp_fin: Impossible, sk->state=7

Do those look like anything important?  I only seem them on these two
servers.  There are a couple other messages that seem to come up every
couple days as well (but only recently).

---
tani hosokawa
river styx internet



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/