i never opened all these services......... but i see them all with an nmap
what do i do?

Port       State       Service
21/tcp     open        ftp
22/tcp     open        ssh
23/tcp     open        telnet
25/tcp     open        smtp
70/tcp     open        gopher
80/tcp     open        http
110/tcp    open        pop-3
111/tcp    open        sunrpc
113/tcp    open        auth
119/tcp    open        nntp
139/tcp    open        netbios-ssn
443/tcp    open        https
512/tcp    open        exec
513/tcp    open        login
514/tcp    open        shell
515/tcp    open        printer
587/tcp    open        submission
1024/tcp   open        kdm
1521/tcp   open        ncube-lm

----- Original Message -----
From: "Devdas Bhagat" <[EMAIL PROTECTED]>
To: "Linux India" <[EMAIL PROTECTED]>
Sent: Friday, May 03, 2002 1:49 PM
Subject: Re: [LIH] could i have been hacked?


> On 03/05/02 12:57 +0530, Arvind wrote:
> <snip>
> > i keep seeing ssh-agent1 and ssh-askpass1 and files like that.
> > ssh-agent is a symbolic link to ssh-agent1  and respectively for the
other
> > files as well.
> >
> > could i have been hacked ?
> Standard questions:
> Do you have wierd running processes? Using a known clean static build of
> ps.
> Do you have unusual ports open and listening? Using nmap from another
> box.
> Have the md5sums of any binaries changed? Using clean copies of md5sum.
> Did you install those binaries in /usr/local/bin?
> Did another administrator install them?
> Were you unpatched for stuff?
>
> LART:
> Don't use hacked when you mean cracked.
> Crackers break into systems, hackers will only break into their own.
> (wrt security, not cryptography).
>
> Devdas Bhagat
>
> _______________________________________________________________
>
> Have big pipes? SourceForge.net is looking for download mirrors. We supply
> the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
> _______________________________________________
> linux-india-help mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/linux-india-help


_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to