RE: [cobalt-security] No telnet on saturdays??

["Ervin Tarkhanian" <ervin@xxxxxxxxxx>]

Hi Kevin,

I'm pretty new at Linux/Cobalt, so if you could please enlighten me on how
to access these ps ax reports, I'd appreciate it.

As for connecting to port 109, that port hasn't opened up yet, but a bunch
of other ports keep popping up and disappearing. I'm running port scans
every five minutes, but I can't seem to find a pattern of when this is
occurring.

Best regards,
Ervin Tarkhanian

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Kevin D
Sent: Monday, August 13, 2001 12:51 PM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] No telnet on saturdays??

From: "Ervin Tarkhanian" <ervin@xxxxxxxxxx>

> I'm wondering if anyone else has experienced anything like this before.

Not yet.

Log into your server on a weekend and compare ps ax reports with those on
the weekdays. Check for fishy cron jobs. My suspicion is that you've been
hacked. What result do you get when trying to connect to port 109 with
telnet on a weekend?

Kevin

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security