[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] [RaQ3] Kernel IP routing table HACKED?
- Subject: Re: [cobalt-users] [RaQ3] Kernel IP routing table HACKED?
- From: enrique <enriquevega@xxxxxxx>
- Date: Fri Jul 27 05:18:09 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
on 7/27/01 1:38 PM, Curtis Ross at Curtis_Ross@xxxxxx wrote:
>> -----Original Message-----
>> From: enriquevega@xxxxxxx@CPR
>> Sent: Thursday, July 26, 2001 9:55 AM
>> To: cobalt-users@xxxxxxxxxxxxxxx
>> Subject: Re: [cobalt-users] [RaQ3] Kernel IP routing table
> HACKED?
>
> <snip>
>>>> My RaQ3 was recently hacked by Dwarf. I was notified by a change to
> an...
>>> ...
>>>> 169.254.183.37 which seems to end up at blackhole.isi.edu.
>>>>
>> Hmm, then I definitely have been hacked!
> <snip>
>
> I would check with you ISP and see if they are using that IP for
> hardware routing. It may not have any relationship with you being
> hacked.
I did, and they said 169.254.183.37 has nothing to do with their network. So
what can I do to find the script which loads this ip address during bootup?
enrique