|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: rooted by r0x - from address 212.177.241.127
From: Ethan King (ethan
INLIGHTNET.NET)Date: Wed Mar 29 2000 - 12:51:12 CST
- Next message: Bobby, Paul: "UDP port 9200"
- Previous message: Patrick Oonk: "Re: Dramatic increase in UDP Port 137 (NetBIOS Name Service) probeactivity"
- In reply to: Dwight Schauer: "rooted by r0x - from address 212.177.241.127"
- Next in thread: Robert Kulagowski: "Re: 8 hours of pinging"
- Reply: Ethan King: "Re: rooted by r0x - from address 212.177.241.127"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> >From my named/bind default directory:
> drwxr-xr-x 2 root root 1024 Mar 28 12:05 ADMROCKS
I had the exact same thing happen to one of my machines on March 25. How
many people have been hit by this? The only services running on the hacked
machine were ssh and named however.. so I'm not 100% convinced it's bind.
The machine was running RedHat 6.1 with only a few updates installed at the
time.
-Ethan
- Next message: Bobby, Paul: "UDP port 9200"
- Previous message: Patrick Oonk: "Re: Dramatic increase in UDP Port 137 (NetBIOS Name Service) probeactivity"
- In reply to: Dwight Schauer: "rooted by r0x - from address 212.177.241.127"
- Next in thread: Robert Kulagowski: "Re: 8 hours of pinging"
- Reply: Ethan King: "Re: rooted by r0x - from address 212.177.241.127"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]