FW: [cobalt-users] Got Hacked.

["Mike" <jns-michael@xxxxxxxx>]

All of the emails about getting hacked have me a bit scared.  I have a
colo'd RAQ4 with about 100 websites on it.  What should I do to protect
myself from a hack attempt?

Mike

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Dee Dreslough
Sent: Wednesday, February 14, 2001 12:27 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] Got Hacked.

Hi Y'all!

Just an FYI that my Cobalt Raq3i got hacked last night. *sigh* From what I
can tell, they used the BIND exploit that's been talked about... Luckily,
they didn't restart various processes they were putting trojans on correctly
and I got a bootload of warning messages in the morning.  They also broke a
bunch of stuff and left calling cards all over the machine, despite a
half-hearted attempt to clean out the log files to cover their tracks.  It
was like having a bear break into my virtual kitchen. They left a big mess.
:)

I suspect they found me through this list, and are hunting for Cobalts run
by newbies...so, Newbies beware! :) Now I'm off to pay money to have them
rebuild my machine from scratch, and then I get to install all my websites
from backup again.

I'm learning...I don't like to learn the hard way, but sometimes it's the
only way I do learn... :)

Love, y'all!

Dee Dreslough
Cobalt Newbie, who's going to learn how to run Portsentry, etc etc etc...and
be a lot more dilligent about installing those patches as they come out
(once I know they won't kill my system.)

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users