[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Hacked?
- Subject: Re: [cobalt-users] Hacked?
- From: "satan" <satan@xxxxxxxxxxxxxxxx>
- Date: Tue May 29 14:58:37 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
#1 Log files
#2 top to see if something running weird
#3 ps -aux to see if unknown process are running
#4 netstat to see open port on your machine
#5 look for internal contents ( cgi running, weird file, hacker business
card, IP scanner file (surely have a process running this) etc)
#6 Look at you telnet root/su buffer command if you see something you didn't
do (sometime they forget to clear that (ssh user ?))
#7 god help you, i cannot do better
Stephen Gilbert
satan@xxxxxxxxxxxxxxxx