Actually i have seen this kind of an attitude, the total assumption that it is 
actually you who is doing it. So check your server, take down everything that 
looks suspect, specially in the /tmp folder and kill any scripts that are 
running as apache or nobody. you might want to uninstall and than reinstall 
both named and sshd. If you are having some standard forum or webmail, check 
for updates, also check if you have file upload enabled in any of those 
webapps. 
Cheers
Szemir


On October 5, 2006 20:15, Mitchell Brown wrote:
> Shaw just called me and told me my domain server (untitled1.ca) has been
> port scanning for weeks now and that they're considering pressing legal
> charges.
> Its not my box, its hosted in the states, and one of the CLUG members (to
> remain anonymous) lent me a domain and space on it! So somehow someone's
> exploited his box, and now I'm in trouble - the stupid Shaw guy couldn't
> give me any help.
>
> So if someone can call me (2305629) or something like that, that'd be great
> - damn it, only 16 and I'm gettin charged with port scanning, even though
> it ain't my box!

_______________________________________________
clug-talk mailing list
[email protected]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to