RE: [cobalt-users] Strange line in my history

[desa15@xxxxxxxx]

>>
>> Hi to all,
>>
>> Today, i found this in my admin history  sh ~/hw_inventory ;
>> rm ~/hw_inventory 2>&1
>>
>> Nothing have ssh acces to my raq550 except i and my data center.
>>
>> Chkrootkit not inform about any anomalies, i search in google
>> about this script and nothing to find.
>>
>> Anyone know what is this script. ??
>>
>Haven't seen this script, but to me, it looks like something your
>datacenter is doing.
>Hardware inventory - could be a script they are running to gather stats
>on what all they have.
>You might consider contacting them to find out for sure.

>Vidar

Yes, i contact first (before send this email) with my data center and tell
to me we not run any script
in my server.

Is strange, but any log was modified, no ssh access appear except me, no
suspicious files, no
stealth port scans, and all work ok i install tripwire
today, to monitored the files.

Thanks


Un saludo, Danny