Re: Hacked Servers

2001-12-04 Thread Robert Cross
mysql at hotchilli.co.uk wrote: >We have 2 Redhat 6.1 servers and MySQL 3.22.32 and both boxes >appear to have been hacked on Friday last and MYSQL client just hangs >when connecting to the localhost MYSQL server. >MySQL is running on both boxes and suffer the same problems. >We have Intrusion s

Re: Hacked Servers

2001-12-03 Thread Philip Molter
On Mon, Dec 03, 2001 at 05:25:38PM -, [EMAIL PROTECTED] wrote: : Hi : : We have 2 Redhat 6.1 servers and MySQL 3.22.32 and both boxes : appear to have been hacked on Friday last and MYSQL client just hangs : when connecting to the localhost MYSQL server. : : MySQL is running on both boxes an

Re: Hacked Servers

2001-12-03 Thread Kevin Whitney
Been there too. Sounds like a 'script kiddy'. You should check your hosts.allow/deny, then firewall software configuration (ipchains?) files. That MIGHT get you into a functional situation. Also, programs like 'ls', ps, netstat ,etc have been replaced on your system, and you won't be able

RE: Hacked Servers

2001-12-03 Thread Joe Kaiping
Hi there, I feel for you. Been there myself before I installed a firewall router. (Very useful, BTW, to restrict access to only your customers IPs instead of the whole world.) There isn't really enough info provided here to know for sure, but it might be that when you were hacked, your inetd.co