Re: [cobalt-users] IRC Bots Hacker/Hacked

[nntp <nntp@xxxxxxxxx>]

Hi,
At 04:37 07-07-2000 +0100, you wrote:
>Please can someone shed some light on this for me. Someone recently
emailed me informing me that...
>
>Hello someone hacked to your box
>and he's using it to run bots in Efnet (irc)
>please do something about it
>here is some info that can help you...
>kofif is kof@xxxxxxxxxxxxxxx * ani kofif

Do you have a user "kof" on the ns.isitgone.com server?  if you did not
create the user, then the first step is to change your admin and root
passwords.  Verify your logs.  It would be difficult to secure the box as
the well-known services supported by Cobalt have vulnerabilities.

BTW, did you have any problems with Sendmail recently?

-sm