Thanks for the immediate replies from George Gallen
and Rob McCauley.
George suggested using whois or some similar tool
and Rob gave me the SANS link.
I'll try em both.
thanks again
Hi managers,
It seems someone is trying to break into one of my compaq alphas using the
remote printer port 515. How they are getting to the system is something we
are working on,
and at any rate I long ago blocked that avenue so they cannot get in or
print for that matter.
I have a list of the systems the attempts have come from over the past 2 or
3 days, and my question is where do I go from here to try to notify the
managers of those domains that someone may have comprimised their domains?
thanks muchly
-----------------------------------------------------
Walter North 406-444-2914
Operating Systems Programmer
wnorth_at_state.mt.us
Drakenberg's Discovery:
If you can't seem to find your glasses,
it's probably because you don't have them on.
-----------------------------------------------------
Received on Tue Apr 03 2001 - 20:12:33 NZST