Sponsored Content
Special Forums IP Networking in.telnetd[5115] -- compromised? Post 7159 by LowOrderBit on Wednesday 19th of September 2001 07:23:16 PM
Old 09-19-2001
in.telnetd[5115] -- compromised?

/* Linux Slackware */

looking in my logs I see tons of entries similar to below. Does anyone know what these mean, and should I be concerned. I looked up a few of the IP's at Arin.net and saw that many of them belong to isp's (not good).. Any information is helpful..

Body of Messages log
----------------------------

Jun 29 09:06:30 gateway profgpd[5155]:connect from 212.120.97.36

Jun 29 06:11:37 gateway in.telnetd[5102]: connect from root@66.115.18.3

Jul 1 03:07:58 gateway proftpd[5477]: connect from 209.87.230.226

---------------------------

gut feeling is that I have been compromised... am I right??

e0-
 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

telnetd: all network ports in use

I hope someone can enlighten me on this. A few weeks ago, the root file system my UnixWare 7.1.1 server became corrupt so I ended up doing a full restore of the OS from tape backup. Since then, after I get about 270 users on the system, the message "telnetd: all network ports in use" is... (1 Reply)
Discussion started by: davekox
1 Replies

2. Cybersecurity

telnetd vs telnetd -a

Hi folks. I have a quick question on using "telnetd" vs. "telnetd -a". OS: AIX 5.x (5.1 through 5.3 ML3) Some engineers at work want to stop using "telnetd -a" and use "telnetd". (and of course, if I could get a cogent answer from them, I wouldn't be posting this question...) :mad: The... (0 Replies)
Discussion started by: davidl9999
0 Replies

3. Solaris

telnetd bug!

hi mates, a very important info for all solaris admins, there is a bug in telnetd on nearly every solaris version: pressy@mp-wst01 # id uid=100(pressy) gid=1(other) pressy@mp-wst01 # telnet -l "-froot" 192.168.40.1 Trying 192.168.40.1... Connected to 192.168.40.1. Escape character is... (3 Replies)
Discussion started by: pressy
3 Replies

4. Solaris

Can't start telnetd

Hello all, I've got a problem on a V240 running Solaris 9, the telnet daemon won't start. The error message I get is "telnetd: stdin is not a socket file descriptor." I've never seen this message before and I'm not exactly sure what it means. I know generally what stdin, sockets, and file... (4 Replies)
Discussion started by: ONEX
4 Replies

5. SCO

Telnetd Port Options

Ok, here i am in 2008 trying to figure out how to edit the port of Telnetd in sco openserver 4.2. I googled my butt off and cant seem to find any info. Does anyone have some specific howto's or good documentation on this? (2 Replies)
Discussion started by: j0ntar
2 Replies

6. AIX

telnetd daemon

Hi, When a client connected to AIX server by telnet is killed/crashes, is there a way for telnetd to recognize that and close/kill the application linked/started by that telnet session? We have a situation where clients disconnect because of frequent network outages, this leaves the... (2 Replies)
Discussion started by: mreyaz
2 Replies

7. Cybersecurity

Server has been compromised

Hi, I want to ask something about server that has been compromised. Recently, one of my VPS server has been hacked and the attacker install somekind like "IRC" script. Everytime I killed the process or close the port, it can open again .. and again ..I'm sure the attacker has installed... (14 Replies)
Discussion started by: franx47
14 Replies

8. UNIX for Dummies Questions & Answers

Please help my computer has been compromised

Hi everyone, I hope I am posting in the right spot and I really need some help. I am going through a horrible divorce and I am afraid that my husband has compromised . He set up my mac computer and router and for my job set up remote access for me. I caught him cheating on me and I think he... (6 Replies)
Discussion started by: kk243665
6 Replies
KUMO-GATEWAY(1) 					      General Commands Manual						   KUMO-GATEWAY(1)

NAME
kumo-gateway - kumofs gateway daemon SYNOPSIS
kumo-gateway -m <addr[:port]> -p <addr[:port]> [-t port] [-b port] [-c port] DESCRIPTION
kumo-gateway receives requests from applications and relays it to the kumo-servers. Run this daemon on the hosts that runs applications that uses kumofs. OPTIONS
-m <addr[:port=19700]> --manager1 address of manager 1 -p <addr[:port=19700]> --manager2 address of manager 2 -lc --local-cache local cache (Tokyo Cabinet abstract database) -t <[addr:]port=11411> --memproto-text memcached text protocol listen port -b <[addr:]port=11511> --memproto-binary memcached binary protocol listen port -c <[addr:]port=11611> --cloudy asynchronous memcached binary protocol listen port -F --memproto-save-flag save flags on memcached text protocol -As --async-replicate-set send response without waiting replication on set -Ad --async-replicate-delete send response without waiting replication on delete -G <number=5> --get-retry get retry limit -S <number=20> --set-retry set retry limit -D <number=20> --delete-retry delete retry limit -rn <number=4> --renew-threshold hash space renew threshold -k <number=2> --keepalive-interval keepalive interval in seconds -Ys <number=1> --connect-timeout connect timeout time in seconds -Yn <number=4> --connect-retry-limit connect retry limit -Ci <number=2> --clock-interval clock interval in seconds -TW <number=2> --write-threads number of threads for asynchronous writing -TR <number=4> --read-threads number of threads for asynchronous reading -o <path.log> --log output logs to the file -g <path.mpac> --binary-log enable binary log -v --verbose -d <path.pid> --daemon EXAMPLE
[on cli1 ]$ kumo-gateway -v -m mgr1 -p mgr2 -t 11211 -As -Ad [localhost]$ kumo-gateway -v -m localhost -t 11211 -d kumo-gateway.pid SEE ALSO
kumolog(1). kumo-gateway July 2009 KUMO-GATEWAY(1)
All times are GMT -4. The time now is 01:27 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy