[Gllug] hacked !

Xander D Harkness xander at harkness.co.uk
Thu Nov 29 10:06:07 UTC 2001


If you can check the logs and report it to abuse:

I have had a few successes this week.

This guy had his box cracked and did not know it.  The source of yours
may be the same.

Cheers
Xander

From: Jack Suess <jack at umbc.edu>
To: Xander D Harkness <xander at harkness.co.uk>
Subject: Re: Attempt at unauthorised access
Date: 23 Nov 2001 13:00:44 -0500



thanks,
the machine is off the net and being reinstalled.

jack
On 23 Nov 2001, Xander D Harkness wrote:

> Dear Sir / Madam,
>
> I have become aware of attempt to login to one of our servers from an
> unexpected source.
>
> It appears to originate from your network.
>
> While the attempt was unsuccessful, I thought you might find the
> information useful in case it forms part of a pattern.
>

On Wed, 2001-11-28 at 13:16, mallum wrote:
> Arg, my colo box at rackspace that I share with a friend was hacked
> last night - see http://mallum.com , though they seem to have left my
> main site there ( http://10.am ) alone. 
> 
> The box was never a fortress, it only used to have httpd and ssh open
> on it - though it seems my friend has opened a load of other up :(
> 
> Im gonna copy all my stuff down and recommend to my friend we rebuild
> the box from scratch ... any other advice ?
> 
>   -- mallum
> 
> -- 
> Gllug mailing list  -  Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug



-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list