Re: Logwatch reports a possible successful probe on my server. Has my server been exploited?
Bjorn via Logwatch-devel <[email protected]> Sat, 14 Nov 2020 17:36:54 -0800
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
U29tZSBvYnNlcnZhdGlvbnM6CgotIFRoZSBmaXJzdCBpdGVtIGlzIHByb2JhYmx5IGlubm9jdW91 cy4gIFRoZSAibnVsbCIgcmVxdWVzdCAobm8gVVJMKSB3YXMKcmVtb3ZlZCBmcm9tIHRoZSBzY3Jp cHQgYSBjb3VwbGUgeWVhcnMgYWdvIGJlY2F1c2Ugb2YgdGhlIG1hbnkgZmFsc2UKcG9zaXRpdmVz LCBzbyB5b3Ugc2hvdWxkIHVwZGF0ZSB0byB0aGUgY3VycmVudCB2ZXJzaW9uLiAgSSdsbCBub3Rl IHRoYXQKdGhlIHJlc3BvbnNlIGNvZGUgd2FzIDIwMCwgd2hpY2ggaXMgYSBzdWNjZXNzZnVsIHJl c3BvbnNlLiAgSSdkIGJlCmludGVyZXN0ZWQgaW4ga25vd2luZyBpZiBpdCBzaG91bGQgbm90IGhh dmUgYmVlbiBzdWNjZXNzZnVsLgoKLSBGb3IgdGhlIHJlcXVlc3RzIHdpdGggZXJyb3IgcmVzcG9u c2UgY29kZXMsIGxvb2sgZm9yIGEgbGluZSB0aGF0IGhhcwoiR0VUIC8gSFRUUCIgaW4gZWl0aGVy IHRoZSBhY2Nlc3NfbG9nIG9yIHRoZSBzc2xfcmVxdWVzdF9sb2cgKG9yIGFueQpvdGhlciBsb2cg ZmlsZXMgeW91ciBzeXN0ZW0gdXNlcykuCgotIFNpbWlsYXJseSBmb3IgdGhlIG90aGVyIGFjY2Vz c2VzLiAgVGhlICIvMGJlZiIgc3RyaW5nIHdvdWxkIHNlZW0gdmVyeQpkaXN0aW5jdGl2ZS4KCi0g T24gYW4gb3BlbiB3ZWIgc2VydmVyLCBpdCBpcyB1c3VhbCB0byBmaW5kIGF0dGVtcHRlZCBhY2Nl c3NlcyBmcm9tCm90aGVyIHVua25vd24gc3lzdGVtcy4gIFRoZSBHRVQgbWVudGlvbmVkIGFib3Zl IGlzIG9ubHkgb25lIG1ldGhvZCwgYnV0CnRoZSBtb3N0IGNvbW1vbiBvbmUgd2hlbiBvdGhlciBz eXN0ZW1zIHByb2JlIHlvdXIgc2VydmVyLgoKLSBVc2luZyAidGFpbCIgd291bGQgb25seSBmaW5k IG1vcmUgcmVjZW50IGFjY2Vzc2VzLCBhbmQgInRhaWwgLWYiIHdvdWxkCm9ubHkgZmluZCBmdXR1 cmUgbG9nIHN0YXRlbWVudHM7IGJldHRlciB0byBqdXN0ICJncmVwIiB0aGUgbG9nIGZpbGVzCmRp cmVjdGx5LgoKLSBGb3IgdGhlIGFjY2Vzc2VzIHdpdGggZXJyb3IgcmVzcG9uc2UgY29kZSA0MDAs IHlvdXIgc3lzdGVtIHdvdWxkIG5vdApoYXZlIHNlcnZlZCB2YWxpZCBkYXRhLCBhbmQgdGhlcmVm b3JlIHNob3VsZCBub3QgaGF2ZSBhbnkgb3RoZXIKbWVhbmluZ2Z1bCBlZmZlY3Qgb24geW91ciBz eXN0ZW0uCgotIFRoaXMgbG9nd2F0Y2gtZGV2ZWwgbWFpbGluZyBsaXN0IGlzIGRlcHJlY2F0ZWQu ICBGb3IgZnV0dXJlIHJlZmVyZW5jZSwKaXQgaXMgYmV0dGVyIHRvIHVzZSBlaXRoZXIgdGhlICJk aXNjdXNzaW9uIiBsaXN0IG9yIHRoZSAidGlja2V0cyIgbGlzdAp1bmRlciBzb3VyY2Vmb3JnZS5u ZXQuICBGb3IgZXhhbXBsZToKCWh0dHBzOi8vc291cmNlZm9yZ2UubmV0L3AvbG9nd2F0Y2gvZGlz Y3Vzc2lvbi8KCgpPbiAxMS8xNC8yMCAzOjAwIFBNLCBEYXZlIGF0IENvbGxhYm9yYXRpb24gQ2Fm w6kgd3JvdGU6Cj4gSGksIEkgYW0gcnVubmluZyBhbiBVYnVudHUgMTguMDQgTmdpbngtcG93ZXJl ZCBzZXJ2ZXIgd2l0aCBtdWx0aXBsZQo+IHZob3N0cywgd2l0aCBMb2d3YXRjaCBnaXZpbmcgbWUg YSByZXBvcnQgKGhpZ2hlc3QgbGV2ZWwgb2YgZGV0YWlsKSBpbiBteQo+IG1haWxib3ggZXZlcnkg bW9ybmluZy4KPiAKPiBJbiB0aGUgaHR0cGQgc2VjdGlvbiBvZiB0aGUgcmVwb3J0LCBJJ20gZnJl cXVlbnRseSBnZXR0aW5nIHRoZSBzbmlwcGV0Cj4gYmVsb3cuCj4gCj4gwqBBIHRvdGFsIG9mIDEg cG9zc2libGUgc3VjY2Vzc2Z1bCBwcm9iZXMgd2VyZSBkZXRlY3RlZCAodGhlIGZvbGxvd2luZyBV UkxzCj4gwqBjb250YWluIHN0cmluZ3MgdGhhdCBtYXRjaCBvbmUgb3IgbW9yZSBvZiBhIGxpc3Rp bmcgb2Ygc3RyaW5ncyB0aGF0Cj4gwqBpbmRpY2F0ZSBhIHBvc3NpYmxlIGV4cGxvaXQpOgo+IAo+ IMKgwqDCoCBudWxsIEhUVFAgUmVzcG9uc2UgMjAwCj4gCj4gVGhlbiBpbiB0aGUgcmVxdWVzdHMg bGlzdGluZyBvZiB0aGUgaHR0cGQgc2VjdGlvbiwgSSdtIHNlZWluZyBvdXRwdXQKPiBzdWNoIGFz IGJlbG93ICh0aGlzIGlzIGp1c3QgYSBzbWFsbCBzbmlwcGV0IG9mIGEgZGF5J3MgcmVwb3J0KToK PiAKPiDCoFJlcXVlc3RzIHdpdGggZXJyb3IgcmVzcG9uc2UgY29kZXMKPiDCoMKgwqAgNDAwIEJh ZCBSZXF1ZXN0Cj4gwqDCoMKgwqDCoMKgIC86IDE0IFRpbWUocykKPiDCoMKgwqDCoMKgwqAgbnVs bDogOCBUaW1lKHMpCj4gwqDCoMKgwqDCoMKgIC8wYmVmOiA2IFRpbWUocykKPiAKPiBRdWVzdGlv biAxOiBoYXMgYW55b25lIHNlZW4gdGhpcyBiZWZvcmUsIGFuZCBkbyBJIGhhdmUgYSBzZXJpb3Vz Cj4gcHJvYmxlbT8gSSdtIG5vdCBub3RpY2luZyBhbnl0aGluZyBhbWlzcyBpbiBteSBzZXJ2ZXIn cyBvcGVyYXRpb24uLi4KPiAKPiBRdWVzdGlvbiAyOiBJIGhhdmUgYmVlbiB0cnlpbmcgdG8gbG9j YXRlIHRoZSBleGFjdCBsb2cgbGluZXMgaW4KPiAvdmFyL2xvZy9uZ2lueC9hY2Nlc3MubG9nIGFu ZCAvdmFyL2xvZy9uZ2lueC9lcnJvci5sb2cgYnkgbWFudWFsbHkKPiB0YWlsaW5nIG15IGxvZ3Mg YW5kIGJ5IHVzaW5nIGdyZXAgdG8gc2VhcmNoLiBCdXQgc28gZmFyIEkgaGF2ZSBmYWlsZWQuCj4g Q2FuIGFueW9uZSBhZHZpc2UgbWUgb2YgYSB3YXkgdG8gbG9jYXRlIHRoZXNlIGxpbmVzIGVmZmVj dGl2ZWx5Pwo+IAo+IEFueSBvdGhlciB1c2VmdWwgYWR2aWNlIHdvdWxkIGJlIG11Y2ggYXBwcmVj aWF0ZWQuCj4gCgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fCkxvZ3dhdGNoLWRldmVsIG1haWxpbmcgbGlzdApMb2d3YXRjaC1kZXZlbEBsaXN0cy5zb3Vy Y2Vmb3JnZS5uZXQKaHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3JnZS5uZXQvbGlzdHMvbGlzdGluZm8v bG9nd2F0Y2gtZGV2ZWwK