re: [LI] is it hacker ? (fwd)

[Suresh Ramasubramanian <r.suresh@xxxxxxxxxxxxxxx>]

On Sun, 23 Jan 2000, Suresh Ramasubramanian wrote:

> > AS52-07-79.cas-kpts/1Sat Jan 22 06:23Shutdown03:38
> > AS52-10-227. etc etc

If you treat these like in-addr-arpa addresses (reverse them to get ip)
then, they all come to IANA reserved ip blocks (those on your own lan). If
these logs are abnormal, maybe one of your own users is monkeying around
trying to hack.

IANA reserved - 65.0.0.0 to 95.255.255.255 (for use on lan, so nobody is
allotted an ip no in this range)

-- 
Suresh Ramasubramanian     | President, CAUCE India
r.suresh@xxxxxxxxxxxxxxx   | suresh@xxxxxxxxxxxxxxx
http://www.india.cauce.org | Stopping Spam In India
--
It is now pitch dark.  If you proceed, you will likely fall into a pit.

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.