[Systems] [Systems-logs] Logwatch for sunjammer.sugarlabs.org (Linux)

[Sascha Silbe]

On Wed, Mar 10, 2010 at 08:50:24PM -0300, Bernie Innocenti wrote:

> Those are not MTAs verifying MX records. Instead, they're some kind of
> Windows zombies looking for open recursive nameservers, maybe for some
> kind of cache-poisoning attack.
That's an even better explanation. :)
If there's any open port on them you might try running nmap -O to check 
whether they're Windows machines.

CU Sascha

-- 
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20100311/834eb863/attachment.pgp