RE: User HELLO?

Sounds like network penetration testing to me. Look for additional entries with user names like ANONYMOUS, GUEST or FTP. Our last pen test hit random (and some not so random) ports for about 30 minutes.

Of course the only real way to determine if this is "testing" or hacking is to trace the source and ask the culprit.


Regards,
 
Scott Ingvaldson
Senior IBM Support Specialist



-----Original Message-----
From: rob@xxxxxxxxx [mailto:rob@xxxxxxxxx]
Sent: Tuesday, January 03, 2012 9:58 AM
To: Midrange Systems Technical Discussion
Subject: Re: User HELLO?

Thanks. That helps. Column PWRADR returned 10.10.4.145 which NSLOOKUP
shows to be kdvl-qualys.dekko-1.

Now I'm back on the trail.


Rob Berendt