strange message in /var/log/secure

strange message in /var/log/secure

Post by Joseph Norri » Fri, 19 Jun 1998 04:00:00

Hello group,

In just the past week, I have been getting a repeating message in my
/var/log/secure file as follows:
Jun 16 02:33:01 ns in.ftpd[18136]: refused connect from
(ip changed to protect the innocent)

I have my hosts.allow and hosts.deny files set up to only allow certain
ips to telnet or ftp. What is weird about this message is that the is the ip of my web server ip. I never got this before.
Can anyone tell me how to trace this problem?