I got something similar recently. I think it was a phishing expedition. Shouldn't you change the subject of your email when you start a new thread? Dave
On Dec 3, 2007 12:24 AM, Johan Sundström <[EMAIL PROTECTED]> wrote: > > Hi all! > > I got the report below this morning, ive run the rkhunter and it reports no > rootkit. Anyone seen this before? The computer using the ip-adress is a > linux-machine. > > > ------ > [EMAIL PROTECTED] - Sun Dec 02 17:20:21 2007]: > > Greetings: > > > IP Address of attacker: xxx.yyy.zzz.zzz > > Type of attack: URL Injection -- attempt to inject / load files onto the > server via PHP/CGI vulnerabilities > > Sample log report including date and time stamp: [snip] ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
