RE: [cobalt-users] Hacked? Telnet gone, SSH gone, strange ports open

[Elmer Fuddpucker <elmer@xxxxxxxxxxxxxx>]

On Mon, 21 May 2001, d e p e u p l e u r wrote:

} So far I am thinking about reinstalling an earlier OpenSSH from the GUI to
} get in.  I've also found that 514 is a remote shell deamon listening port,
} which sounds like hackers to me.  In any case, I can't seem to find an
} earlier pkg of OpenSSH to install.  Can anybody give me a hand with this.

	I'm not going to post them and I'm not going to give them to you
privately. No insult intended or implied, I simply don't know who
you are or what you are up to you. But if your box has been cracked
the odds are that the replacement SSH has a well known default
password. This is one of the reasons why servers are scanned -
crackers looking for an already installed backdoor. You got the
clue you need. I recomend that you find yourself a good security
guru and pay the price, or head over to a quality security site and
do your homework. Quite simply, getting in shouldn't be much of a
problem if the box was indeed hacked. It's simply a matter of either
doing your homework or paying someone who has done your homework for
you for their expertise.

	brent sims

	Elmer Fuddpucker's WWW Directory
	http://www.fuddpucker.com/