LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Weird Logs: Am I being hacked? (https://www.linuxquestions.org/questions/slackware-14/weird-logs-am-i-being-hacked-98267/)

KingofBLASH 09-29-2003 11:41 AM

Weird Logs: Am I being hacked?
 
The following lines are appearing over and over again in my /var/log/messages:

Sep 29 12:33:59 syr-24-59-77-252 kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC=00:01:03:2e:db:63:00:01:42:1d:dd:8c:08:00 SRC=24.59.130.38 DST=24.59.77.252 LEN=92 TOS=0x00 PREC=0x00 TTL=121 ID=26724 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=43905
Sep 29 12:33:59 syr-24-59-77-252 snort: [1:483:2] ICMP PING CyberKit 2.2 Windows [Classification: Misc activity] [Priority: 3]: {ICMP} 24.59.130.38 -> 24.59.77.252
Sep 29 12:34:00 syr-24-59-77-252 CROND[27498]: (root) CMD ( /usr/share/msec/promisc_check.sh)
Sep 29 12:34:06 syr-24-59-77-252 kernel: Shorewall:OUTPUT:REJECT:IN= OUT=eth1 SRC=169.254.69.31 DST=169.254.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=64 ID=12916 DF PROTO=UDP SPT=631 DPT=631 LEN=124
Sep 29 12:34:09 syr-24-59-77-252 kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC=00:01:03:2e:db:63:00:01:42:1d:dd:8c:08:00 SRC=203.197.199.185 DST=24.59.77.252 LEN=445 TOS=0x00 PREC=0x00 TTL=230 ID=47889 PROTO=UDP SPT=32770 DPT=1026 LEN=425

What does it mean? Am I being hacked?

Thanks in advance,

Dan

Tarts 09-29-2003 01:13 PM

This would probibly belong's in the security forum.

KingofBLASH 09-29-2003 01:31 PM

Sorry. I will repost it there.

-Dan


All times are GMT -5. The time now is 08:19 PM.