On Sun, 4 Mar 2001, 15:24 -0800 Ben Ocean wrote:
> Here's another one, this one not to *tty1* but rather *pts/1*. Have I been
> hacked?
> BenO
>
> >Date: Sun, 4 Mar 2001 14:46:13 -0800
> >From: bin <[EMAIL PROTECTED]>
> >To: [EMAIL PROTECTED]
> >Subject: portmap attempt on thor from 211.57.229.2 (211.57.229.2)
> >
> > [211.57.229.2]
> > Login: operator Name: operator
> > Directory: /root Shell: /bin/sh
> > On since Mon Mar 5 13:13 (KST) on pts/1 from 21dial234.xnet.ro
> > 19 seconds idle
> > On since Mon Mar 5 13:23 (KST) on pts/2 from 21dial234.xnet.ro
> > 12 minutes 19 seconds idle
> > Last login Mon Mar 5 13:23 (KST) on 2 from 21dial234.xnet.ro
> > No mail.
> > No Plan.
Oh yeah. That's a hack! The attacker is (sadly) a romanian.
Sadly because I'm too and I hate the fact that my homies find such
activity enjoyfull.
Further more. The ISP is Xnet, one of the bigest/best here. You could
contact them and try to resolve the problem. Well at least they will
cancel the guy's account, ISPs here don't have any policies against
hacking activities (well, mine does).
--
Silviu Cojocaru
[EMAIL PROTECTED] (new email address)
______________________________________________________________________________
Disk crisis, please clean up!
------------------------------------------------------------------------------
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
