Every once in awhile, if i go to webmin (which i have bookmarked as 

https://localhost:10000/

or

https://127.0.0.1:10000/

i get 

http://www.netbreakthroughs.com/

instead which is some insidious spam promoting site (don't click it
unless you are really curious).


I am behind a linksys firewall, and here is what nmap says:

~ $ nmap -p 1-60000 66.215.6.110

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Interesting ports on 66-215-6-110.pas-eres.charterpipeline.net
(66.215.6.110):
(The 59996 ports scanned but not shown below are in state: closed)
Port       State       Service
80/tcp     open        http                    
2468/tcp   open        unknown                 
5678/tcp   open        unknown                 
6688/tcp   open        unknown                 

Nmap run completed -- 1 IP address (1 host up) scanned in 80 seconds

I have to admit, i don't know what the last 3 are.

chrootkit doesn't show up anything.  Well, i looked thru all the
lines of it.  If there was a problem, would it epeat the problems at
the end?

I am worried quite a bit...

What could it be?

thanks,
eric

-- 
Mandrake HowTo's & More:          http://twiki.mdklinuxfaq.org

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to