misc/112207: I have suspicion that somebudy use my server like
zombie server.
Maksym Kuvyklin
maximo4k at gmail.com
Sat Apr 28 14:20:05 UTC 2007
>Number: 112207
>Category: misc
>Synopsis: I have suspicion that somebudy use my server like zombie server.
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Apr 28 14:20:04 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: Maksym Kuvyklin
>Release: FreeBSD 5.5 STABLE
>Organization:
Embassy of Ukraine
>Environment:
FreeBSD mail.ukremb.com 5.5-RELEASE FreeBSD 5.5-RELEASE #6: Mon Apr 23 14:41:21 EDT 2007 root at mail.ukremb.com:/usr/obj/usr/src/sys/MYKERNEL i386
>Description:
Sorry for my pure English. I am new in this community.
I had detected that somebody tryed to penetrate via ssh into my server. When I had changed the port all this attempts were finished. Then server notified me about that somebody use my IP address and after that my network adapter had down. I had changed it to another one and the server had started work again. I have static IP address.But, now my connection is very slow. I have looked throught the logs and I had not found any tracks of penetration. Please, help me to solve this problem.
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-bugs
mailing list