[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] No telnet on saturdays??
- Subject: Re: [cobalt-security] No telnet on saturdays??
- From: Ted Behling <TBehling@xxxxxxxxxxxxx>
- Date: Mon, 13 Aug 2001 09:46:39 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
At 03:50 PM 8/13/01 -0400, Kevin D wrote:
>From: "Ervin Tarkhanian" <ervin@xxxxxxxxxx>
>
>> I'm wondering if anyone else has experienced anything like this before.
>
>Not yet.
>
>Log into your server on a weekend and compare ps ax reports with those on
>the weekdays. Check for fishy cron jobs. My suspicion is that you've been
>hacked. What result do you get when trying to connect to port 109 with
>telnet on a weekend?
You also might want to peruse /var/log/cron for funny entries, which crond
writes to when it runs something.
--------------------------------------------------------------------------
Ted Behling, Web Application Developer - Monarch Information Systems, Inc.
43 Folly Field Road, Unit 4, Hilton Head Island, SC 29928-5434
E-mail: mailto:TBehling@xxxxxxxxxxxxx
Phone/Fax: 1-800-842-7894 Local or Outside the USA: 1-843-842-7894
Cell Phone (urgent issues): 843-816-7895
Cell Phone E-mail: mailto:TedPhone@xxxxxxxxxxxxx (116 letter limit)
Web site: http://www.MonarchIS.net
--------------------------------------------------------------------------