[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] B**tards!

Did you setup chkrootkit or any other binary file size check tool?

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Andy Jacobs
Sent: Friday, August 09, 2002 2:31 PM
To: Cobalt-Users
Subject: [cobalt-users] B**tards!


Why today.  I have just got back from my father's funeral and some complete
bastard is hacked into my machine.  Someone is using my server to send spam.
I suspect through the old formmail exploit.  I've just suspended the site in
question.

All my customers were getting a mail lock error and when I do a ps -ef there
are various sendmail processes running for root.  I could be barking up the
wrong tree there though.

Can anyone please throw me a small shred of hope and tell me where I might
start looking.

Regards,

Andy

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users