Re: Xwindow "ghost"?

From: Geoff (greendog_at_nospampacific.net.au)
Date: 03/17/05 

Date: Fri, 18 Mar 2005 05:57:48 +1100

Larry I Smith wrote:
> mjt wrote:
>
>> (Larry I Smith <larryXiXsmith@verizon.net>) scribbled:
>>
>>>> .... as we say in Texas, "He's got a big hole in his screen door." :)
>>>>
>>>> mtobler@stimpy:~> whois 220.154.236.183
>>>> descr: Asia Pacific Network Information Center, Pty. Ltd.
>>
>>
>>> There's no network activity, and I'm behind 2 firewalls
>>> (one hardware and one software).
>>>
>>> Since this IP ALWAYS shows as the X IP for the currently
>>> logged on user, and moves from user to user as I log off
>>> then log on as a different user (via kdm), I'm thinking
>>> that it is some kind of pseudo IP used by either X or KDE.
>>>
>>> If I've been 'invaded', how do I tell, and what can I
>>> do about it?
>>
>> [snip]
>>
>>
>> http://www.chkrootkit.org/
>> http://www.rootkit.nl/
>>
>
> I ran both tools. Neither tool found anything.
>
> I'm stumped...
>
> Regards,
> Larry
>

I get much the same thing here, though with a different ip. Haven't got
time now to work out what's going on and googling for the "last command"
is not very helpful! Logging on from a virtual terminal gives an ip of
0.0.0.0

Geoff

Relevant Pages

  • Re: Xwindow "ghost"?
    ... Larry I Smith wrote: ... > mjt wrote: ...
    (comp.os.linux.x)
  • RE: A rather difficult statistical search formula needed (Part 2)
    ... In regards to your question: ... How many rows (devoid of "Larry") are there, ... Thus, this time, this even was absent for 3.000 rows. ... How can we find the maximum number of absences ...
    (microsoft.public.excel.worksheet.functions)
  • Re: Xwindow "ghost"?
    ... Larry I Smith wrote: ... switch back to kdm screen and logon as 'user1' ... The DSL modem is turned off, ... Regards, ...
    (comp.os.linux.x)
  • Re: Xwindow "ghost"?
    ... Larry I Smith wrote: ... switch back to kdm screen and logon as 'user1' ... The DSL modem is turned off, ... Regards, ...
    (alt.os.linux.suse)
  • Re: Xwindow "ghost"?
    ... Geoff wrote: ... > Larry I Smith wrote: ... >> Regards, ... Here's a snip of the output from "last -di": ...
    (comp.os.linux.x)