Re: Hackers on the web
[email protected] (David D. Smith)
| Newsgroups | gmane.org.user-groups.linux.morlug |
|---|---|
| Organization | Only myself |
| Message-ID | <[email protected]> |
"Andrei" == Andrei Smirnov <[email protected]> writes: Andrei> I am running a RH7.2 server at home as a gateway to Andrei> Adelphia's cable Internet. I recently checked the logs and Andrei> found a huge number of root access attempts. I did not Andrei> really see any suspicious things happening on that computer Andrei> except once the external network card disconnected by itself Andrei> (that is, somehow did 'ifdown eth1'), but I am not 100% sure Andrei> if it wasn't something I accidentally triggered. First, are you sure it wasn't cron? The cron daemon generally runs as root. -- David D. Smith A man without doubt is a monster. _______________________________________________ Morlug mailing list [email protected] http://mailman.morlug.org/mailman/listinfo/morlug
signature.asc
(application/pgp-signature, 188 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQBCXUPlEJGOueZRHH4RAovuAKCAtuRhktOMlzIPrnhHS46tHT8XkACglH8b DrLs+th0hMyLvbBNTylol1I= =EvEO -----END PGP SIGNATURE-----