[99382] in RedHat Linux List
Re: break-in attempt
daemon@ATHENA.MIT.EDU (Alex Swedenburg)
Sat Nov 14 00:32:47 1998
From: "Alex Swedenburg" <gamer321@geocities.com>
To: <redhat-list@redhat.com>
Date: Fri, 13 Nov 1998 22:26:52 -0700
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Send them to me, and I MIGHT be able to get somthing out of them, but I
dunno.
Cheers,
Alex (thanks!)
gamer321@geocities.com
----- Original Message -----
From: Gordon Messmer <yinyang@eburg.com>
To: <redhat-list@redhat.com>
Sent: Friday, November 13, 1998 10:24 PM
Subject: Re: break-in attempt
>Greg~
>
>Sure, I'm trying to keep up on security issues to better protect my
>business and our clients. I'd love to see your logs, so I can keep
>abreast of what methods are currently being used (abused).
>
>Thanks
>MSG
>
>Greg Fall wrote:
>>
>> Where should I send logs &c. corresponding to a break-in attempt my
>> machine suffered this morning (I mean is there an organization that
>> would want to see the files)? The logs clearly indicate scripted
>> efforts to get through potential leaks in various daemons that were
>> running at the time. I noticed the break-in attempt while it was
>> happening, and quickly disconnected my computer from the network. I do
>> not believe the attempt was a success, but I'm not sure.
>>
>> I assembled all the available information in /var/log from the 23
>> minutes or so during which the attempt was made and put it in
>> chronological order. Anybody wanna volunteer to look over the resulting
>> 112 kB collection and give me their impression? Thanks,
>>
>> G.F.
>
>
>--
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> http://www.redhat.com http://archive.redhat.com
> To unsubscribe: mail redhat-list-request@redhat.com with
> "unsubscribe" as the Subject.
>
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.