Security Incidents mailing list archives

Re: Strange authentication attempts


From: Leif Ericksen <leife () dls net>
Date: Wed, 31 Mar 2004 21:31:52 -0600

I would disconnect the server in question from the net and start looking
for evidence of a Trojan or for the fact that the box has been hacked.
If that is on YOUR box you may have something to worry about.  If it is
on another persons system let the sleeping dog lie, but use care in
monitoring your server for any potential issues.


--Leif



---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at http://www.securityfocus.com/sponsor/Astaro_incidents_040301
----------------------------------------------------------------------------


Current thread: