[Sop.Tec.LinuxPPP] AYUDA

["Cesar A. Peregrino Rdz." <peregrino en att net mx>]

Hola tengo un problema bastante pesado, tengo instalado un servidor con
linux RedHat 7.1, estaba trabajando muy bien pero desde hace algunos dias me
ha aparecido la sig en el log de messages

Apr 28 17:12:44 serverbuho last message repeated 352102 times
Apr 28 17:13:46 serverbuho last message repeated 349684 times
Apr 28 17:14:46 serverbuho last message repeated 351167 times
Apr 28 17:15:47 serverbuho last message repeated 349221 times
Apr 28 17:16:48 serverbuho last message repeated 354971 times
Apr 28 17:17:50 serverbuho last message repeated 350940 times
Apr 28 17:18:50 serverbuho last message repeated 359265 times
Apr 28 17:19:51 serverbuho last message repeated 349824 times
Apr 28 17:20:52 serverbuho last message repeated 344162 times
Apr 28 17:21:53 serverbuho last message repeated 349285 times
Apr 28 17:22:54 serverbuho last message repeated 350259 times
Apr 28 17:23:55 serverbuho last message repeated 350364 times
Apr 28 17:24:56 serverbuho last message repeated 346107 times
Apr 28 17:25:57 serverbuho last message repeated 343707 times
Apr 28 17:26:22 serverbuho last message repeated 142592 times
Apr 28 17:26:22 serverbuho sshd(pam_unix)[1251]: session opened for user
root by (uid=0)
Apr 28 17:26:22 serverbuho portsentry[990]: attackalert: Possible stealth
scan from unknown host to TCP port: 143 (accept failed)
Apr 28 17:26:54 serverbuho last message repeated 175822 times
Apr 28 17:27:55 serverbuho last message repeated 344325 times
Apr 28 17:28:09 serverbuho last message repeated 82360 times
Apr 28 17:28:09 serverbuho ftpd[1144]: xferlog (send): 1321 148.240.22.155
638976 /klan/Linux/RedHat71/abiword-0.7.13-2.i386.rpm b _ o r aguila ftp 0 *
i
Apr 28 17:28:09 serverbuho portsentry[990]: attackalert: Possible stealth
scan from unknown host to TCP port: 143 (accept failed)
Apr 28 17:28:40 serverbuho last message repeated 171415 times
Apr 28 17:29:40 serverbuho last message repeated 353592 times
Apr 28 17:30:10 serverbuho last message repeated 166657 times


last message repeated,, saben a que se deba, ya que se esta comiendo mi DD,
como elimino o neutralizo, ya que se comio 7 gb del disco en menos de un
dia. mis particiones estan asi.


Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/hda9              7435296   7432920         0 100% /
/dev/hda1                30225      3485     25180  13% /boot
/dev/hda7              1007960     60424    896332   7% /home
/dev/hdb1             14777108   8416492   5609984  61% /Documentos
/dev/hdd1              4136316        20   3926180   1% /respaldo
/dev/hda6              3024016   2155976    714424  76% /usr
/dev/hda5              3024016    117852   2752548   5% /var

bin   dev  home  lib         misc  opt   respaldo  sbin  usr
boot  etc  Documentos  lost+found  mnt   proc  root      tmp   var

lo que si he podido notar es que solo es en la particion /.

alguna sugerencia.

---------------------------------------------------------------------
Lista de soporte de LinuxPPP
 Reglas de la lista en http://linuxppp.com/reglas.html